Light

Episode #941 Quiz

We Told You So!
Date: 2023-09-26 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Apple removed dangerous PostScript/PDF rendering support from macOS after vulnerabilities in interpreters like PSNormalizer enabled malicious files and code execution. Microsoft exposed 38TB via overbroad Azure SAS tokens, risking readable, writable access to backups, keys, and Teams data. Signal deployed hybrid PQXDH, combining X25519 and CRYSTALS-Kyber, against harvest-now-decrypt-later attacks.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What specific problem with Windows initially made ValiDrive harder to finish than Steve expected?

Question 1

What specific problem with Windows initially made ValiDrive harder to finish than Steve expected?

Windows forced ValiDrive to run only inside a Hyper-V virtual machine Windows prevented ValiDrive from accessing any removable USB storage at all Windows corrupted ValiDrive reports unless the program was compiled for DOS Windows's USB chain fought back and interfered with ValiDrive's operation

Question 2: According to the episode, what did Apple ultimately remove from macOS Sonoma as part of ending PostScript support?

Question 2

According to the episode, what did Apple ultimately remove from macOS Sonoma as part of ending PostScript support?

PSNormalizer, along with pstopdf and CGPSConverter Quartz, along with Core Graphics and the PDF subsystem WebKit's entire document viewing pipeline Preview's PDF rendering engine

Question 3: What was the key reason Signal added PQXDH rather than replacing X3DH outright?

Question 3

What was the key reason Signal added PQXDH rather than replacing X3DH outright?

To comply with a NIST mandate requiring hybrid key agreement To preserve support for legacy SMS-based key exchanges To reduce message sizes by eliminating elliptic-curve operations To avoid depending solely on a new quantum-safe scheme that is still unproven

Question 4: What specific misconfiguration made Microsoft's Azure storage exposure far worse than a simple read-only leak?

Question 4

What specific misconfiguration made Microsoft's Azure storage exposure far worse than a simple read-only leak?

The token expired immediately after the first download request The token granted full control over the entire storage account The token only exposed a single checkpoint file with no other data The repository was made public without any token at all

Question 5: How did the attackers on Vodafone Egypt's network localize the malicious middlebox that was injecting the spyware chain?

Question 5

How did the attackers on Vodafone Egypt's network localize the malicious middlebox that was injecting the spyware chain?

By querying Vodafone's subscriber database for the infected phone's routing path By probing remotely and matching the appliance's responses to known hardware By examining the TLS certificate chain returned by the infected iPhone By using traceroute-style TTL manipulation until the packet expired at the target device

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.