Light

Episode #927 Quiz

Scanning the Internet
Date: 2023-06-13 | Length: 2 hrs | Episode page at twit.tv

About this episode

Google’s cloud cryptomining protection targets unauthorized VM-memory malware and compromised identities, offering $1 million indemnification for Security Command Center Premium. Nokia reported IoT botnet DDoS traffic rose fivefold, with a million bots generating over 40% of attacks. Censys scans Internet-wide, fingerprinting services on 3,592 ports using multi-perspective, protocol-aware, opt-outable measurement.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what did Google say its Security Command Center Premium scans for when detecting cryptomining attacks in cloud environments?

Question 1

According to the episode, what did Google say its Security Command Center Premium scans for when detecting cryptomining attacks in cloud environments?

Outbound DNS queries for mining pool domain names, using passive monitoring Virtual machine memory for malware, without agents Cloud audit logs for unusual billing spikes, using API-only analysis Container image registries for known miner hashes, using signed feeds

Question 2: What key weakness in HiCA's ACME handling allowed it to make certificate issuance lead to code execution on the customer's server?

Question 2

What key weakness in HiCA's ACME handling allowed it to make certificate issuance lead to code execution on the customer's server?

It exploited a bug in acme.sh to run arbitrary curl-and-bash commands It required clients to disable certificate revocation checks before enrollment It used a proprietary ACME extension to encrypt private keys with weak RSA It depended on wildcard DNS validation that exposed customer zone transfers

Question 3: Which statement best matches Apple’s description of its new Communications Safety expansion announced at WWDC 2023?

Question 3

Which statement best matches Apple’s description of its new Communications Safety expansion announced at WWDC 2023?

It now scans iCloud backups and alerts Apple before sensitive media syncs It now covers video content and can be integrated into third-party apps through a new API It now only warns adults, while child-account protections remain unchanged It now blocks all incoming media from unknown contacts unless encrypted with Passkeys

Question 4: How does Censys describe its regular scanning strategy for the public IPv4 space and related services?

Question 4

How does Censys describe its regular scanning strategy for the public IPv4 space and related services?

It scans 137 popular ports daily, 3,455 additional ports every 10 days, and all ports at low background rate It scans only cloud-provider hosts and leaves the global IPv4 space untouched It scans 1024 common ports weekly and rechecks all responsive hosts every hour It scans only IANA-assigned ports daily and ignores unexpected ports entirely

Question 5: What did Censys say users should do if they want to opt out of its data collection?

Question 5

What did Censys say users should do if they want to opt out of its data collection?

Disable DNS resolution on the host so Censys cannot detect IPv6 addresses Submit a signed removal request and Censys will delete historical scan data Drop traffic from Censys scanning subnets and filter its HTTP user agent Block only port 443 and leave other ports visible to preserve notifications

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.