Light

Episode #930 Quiz

Rowhammer Indelible Fingerprinting
Date: 2023-07-11 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Progress Software issued another MOVEit Transfer patch after HackerOne and ZDI found additional SQL injection and crash flaws. Huntress saw theft and extortion, not ransomware. SlowMist reported $922 million stolen in 185 crypto incidents. Avast’s Jumpshot sold user activity. Centauri uses Rowhammer bit-flip distributions for 99.91% stable DRAM fingerprinting.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the episode's discussion of MOVEit follow-up research, what did the latest forensics suggest the Clop-linked attacks had been limited to, rather than expanding into full network compromise?

Question 1

In the episode's discussion of MOVEit follow-up research, what did the latest forensics suggest the Clop-linked attacks had been limited to, rather than expanding into full network compromise?

Ransomware deployment across internal enterprise file servers Credential theft from adjacent Microsoft 365 tenants Worm-like propagation into every reachable Windows host Data theft and extortion against the MOVEit appliance itself

Question 2: What exact mechanism did Mozilla introduce in Firefox 115 to control risky add-ons on websites?

Question 2

What exact mechanism did Mozilla introduce in Firefox 115 to control risky add-ons on websites?

Site-Specific Add-on Refusal Quarantined Domains Extension Lockdown Profiles Trusted Extension Zones

Question 3: According to the episode, what was the immediate technical side effect of Apple's withdrawn Rapid Security Response update that caused website compatibility problems?

Question 3

According to the episode, what was the immediate technical side effect of Apple's withdrawn Rapid Security Response update that caused website compatibility problems?

It switched Safari to a new TLS fingerprint It appended a lowercase "a" to the operating system version string It removed the browser's User-Agent header entirely It changed the browser engine identifier to WebKit/606

Question 4: In the Rowhammer fingerprinting paper, what was the reported time needed to extract a fingerprint in the best case?

Question 4

In the Rowhammer fingerprinting paper, what was the reported time needed to extract a fingerprint in the best case?

29.2 seconds 1.92 minutes 9.92 seconds 9.92 minutes

Question 5: What operating system did Steve say he had selected for SpinRite 7 because it was a finished, source-available RTOS with a very small footprint?

Question 5

What operating system did Steve say he had selected for SpinRite 7 because it was a finished, source-available RTOS with a very small footprint?

RTOS-32 Haiku FreeDOS OpenKylin

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.