Light

Episode #915 Quiz

Flying Trojan Horses
Date: 2023-03-21 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Google disclosed four severe Samsung Exynos baseband flaws enabling Internet-to-baseband remote code execution with no user interaction, needing only a phone number. Google delayed full details, advised disabling Wi‑Fi calling and VoLTE, and patched Pixel devices.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the key condition required to remotely compromise affected Samsung Exynos baseband chips through the severe vulnerabilities Google withheld details about?

Question 1

According to the episode, what was the key condition required to remotely compromise affected Samsung Exynos baseband chips through the severe vulnerabilities Google withheld details about?

The attacker had to convince the victim to install a malicious app The attacker had to know the victim's phone number The attacker had to be the device's mobile network operator The attacker had to possess the victim's IMEI and ICCID values

Question 2: What workaround did Google recommend for affected devices until patches were installed?

Question 2

What workaround did Google recommend for affected devices until patches were installed?

Install the March 2023 update only after factory resetting the phone Disable mobile data while leaving WiFi calling enabled Disable WiFi calling and Voice-over-LTE data Disable all cellular service and use airplane mode permanently

Question 3: What did Socket's 'safe npm' tool do when it detected a risky package during installation?

Question 3

What did Socket's 'safe npm' tool do when it detected a risky package during installation?

Force the install to proceed after showing a summary screen Silently remove the package after installation completed Submit the package to GitHub for centralized malware review Pause the install and warn the developer before execution or disk write

Question 4: What was the specific concern raised in the Chapter-justified GRIMM/Synacktiv analysis of the DJI GO 4 app's update mechanism?

Question 4

What was the specific concern raised in the Chapter-justified GRIMM/Synacktiv analysis of the DJI GO 4 app's update mechanism?

It could merely display release notes without changing the app It could only update through the Play Store after review It could fetch and install APKs outside Google Play It could only download firmware for the drone hardware

Question 5: What did CISA's initial Ransomware Vulnerability Warning Pilot notification specifically target, according to the episode?

Question 5

What did CISA's initial Ransomware Vulnerability Warning Pilot notification specifically target, according to the episode?

93 organizations running Microsoft Exchange with ProxyNotShell 93 organizations running exposed UPnP services 101 websites still using Google Analytics and Facebook pixels 18 manufacturers using vulnerable Exynos modem chipsets

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.