Light

Episode #916 Quiz

Microsoft's Email Extortion
Date: 2023-03-28 | Length: 1.25 hrs | Episode page at twit.tv

About this episode

Synacktiv won Pwn2Own by chaining Bluetooth heap overflow and out-of-bounds write flaws to compromise Tesla infotainment, then root the vehicle. GitHub rotated its RSA SSH host key after inadvertent public exposure. Microsoft tests Edge cryptocurrency wallets while Exchange Online will throttle or block mail from unsupported on-prem servers, citing security.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What specific consequence did Synacktiv’s Bluetooth-chip exploit achieve in the Tesla demonstration at Pwn2Own 2023?

Question 1

What specific consequence did Synacktiv’s Bluetooth-chip exploit achieve in the Tesla demonstration at Pwn2Own 2023?

They bypassed Tesla’s cloud authentication and extracted fleet telemetry from the vehicle account. They broke into the infotainment system and gained root access to the rest of the car. They exposed Tesla’s private signing key and used it to forge vehicle firmware updates. They disabled Tesla’s charging controls and permanently bricked the battery management module.

Question 2: What did GitHub say about the impact of the briefly exposed RSA SSH private key they rotated?

Question 2

What did GitHub say about the impact of the briefly exposed RSA SSH private key they rotated?

It could enable impersonation of GitHub or eavesdropping on Git operations over SSH. It affected only HTTPS traffic and required users to re-trust their browser certificates. It allowed direct access to GitHub’s infrastructure and customer repositories. It forced a complete reset of all Ed25519 and ECDSA host keys across GitHub.com.

Question 3: How did the UK National Crime Agency use its fake DDoS-for-hire sites to extend the sting beyond arrests?

Question 3

How did the UK National Crime Agency use its fake DDoS-for-hire sites to extend the sting beyond arrests?

It published source code for the sites so researchers could verify the takedown. It shut all the sites down immediately after the first arrest to preserve evidence. It redirected victims to a public blockchain page listing convicted operators. It replaced one site’s homepage with a warning that the site had been created and controlled by the NCA.

Question 4: What did Zoom add to its bug bounty program in FY24 to complement CVSS?

Question 4

What did Zoom add to its bug bounty program in FY24 to complement CVSS?

A privacy score that measures whether reports involve encrypted meetings only. A researcher reputation score that replaces CVSS for all reports. A risk-ranking model that scores only exploit complexity and public exposure. A Vulnerability Impact Scoring System that analyzes 13 aspects of impact.

Question 5: What condition did Microsoft identify as the signal that an Exchange server would be treated as a “persistently vulnerable” source for enforcement against Exchange Online?

Question 5

What condition did Microsoft identify as the signal that an Exchange server would be treated as a “persistently vulnerable” source for enforcement against Exchange Online?

It was running on-premises Windows Server without a current antivirus subscription. It was using an older TLS cipher suite for inbound mail connections. It was unsupported or significantly behind on updates for Exchange Server. It was configured to send mail through a third-party SMTP relay.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.