Light

Episode #920 Quiz

An End-to-End Encryption Proposal
Date: 2023-04-25 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Citizen Lab reported iOS 15/16 Pegasus zero-click chains targeting HomeKit and Find My, with Lockdown Mode issuing real-time warnings and apparently blocking successful exploitation. ESET found 56% of used routers retained configurations, credentials, and VPN keys, enabling network access. Cisco SNMP ROP malware still exploits unpatched routers, exfiltrating ARP tables.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to Citizen Lab's summary of NSO Group's 2022 iOS zero-click activity, what did Apple's Lockdown Mode do for a brief period when PwnYourHome exploitation was attempted against enabled devices?

Question 1

According to Citizen Lab's summary of NSO Group's 2022 iOS zero-click activity, what did Apple's Lockdown Mode do for a brief period when PwnYourHome exploitation was attempted against enabled devices?

It blocked the delivery of the initial HomeKit stage entirely. It warned targets in real time during attempted exploitation. It disabled iMessage until the device was restarted. It prevented all zero-click attacks against iOS 15 and 16.

Question 2: In Citizen Lab's description of the NSO Group exploit chains, what was the second step in both PwnYourHome and FindMyPwn?

Question 2

In Citizen Lab's description of the NSO Group exploit chains, what was the second step in both PwnYourHome and FindMyPwn?

A stage that targeted the HomeKit process. A stage that targeted the Photos attachment parser. A stage that targeted the iMessage process. A stage that targeted the Find My feature.

Question 3: What did the UK's NCSC say about the commercial cyber sector over the past 10 years?

Question 3

What did the UK's NCSC say about the commercial cyber sector over the past 10 years?

At least 800 countries purchased commercial cyber intrusion software or spyware. At least 18 countries purchased commercial cyber intrusion software or spyware. At least 80 companies purchased commercial cyber intrusion software or spyware. At least 80 countries purchased commercial cyber intrusion software or spyware.

Question 4: What did Check Point say was a privacy risk of stolen ChatGPT Premium accounts beyond bypassing geofencing restrictions?

Question 4

What did Check Point say was a privacy risk of stolen ChatGPT Premium accounts beyond bypassing geofencing restrictions?

They automatically disclose the payment card used to create ChatGPT itself. They reveal the OpenAI source code used to generate answers. They unlock deleted corporate chats from every other account. They expose the prior owner's recent queries stored in the account.

Question 5: According to ESET's router survey, what percentage of the acquired used routers contained both router-to-router authentication keys and itemized connection details for specific applications?

Question 5

According to ESET's router survey, what percentage of the acquired used routers contained both router-to-router authentication keys and itemized connection details for specific applications?

89% for each of those two data types. 44% for each of those two data types. 33% for each of those two data types. 100% for each of those two data types.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.