Light

Episode #959 Quiz

Stamos on "Microsoft Security"
Date: 2024-01-30 | Length: 2 hrs | Episode page at twit.tv

About this episode

Apple will let EU iPhone users choose among 12 randomly ordered default browsers and, with authorization, non-WebKit engines under privacy and security mitigations. HP firmware bricked printers using third-party ink. A 12TB breach dump enabled credential attacks. Deleted Slack, Teams, and Signal chats must now be preserved under legal holds.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what specific change in iOS 17.4 is required only for EU users when they first open Safari?

Question 1

According to the episode, what specific change in iOS 17.4 is required only for EU users when they first open Safari?

A mandatory WebKit engine update is applied before any browser can launch. A per-app warning is shown only when Safari detects third-party extensions. A randomized list of the 12 most popular browsers appears as the default choice screen. A system-wide setting disables all non-Safari browsers until approval is granted.

Question 2: What made the ransomware attack against China’s ICBC currency trading network fail to spread in the episode’s account?

Question 2

What made the ransomware attack against China’s ICBC currency trading network fail to spread in the episode’s account?

The malware lacked a working exploit for Microsoft SQL Server. The bank’s EDR automatically quarantined the malicious payload. The affected systems were isolated behind an air-gapped Windows domain. The critical server was running a Novell Netware server.

Question 3: What did the episode say was the main security implication of Mercedes-Benz leaving a GitHub token in a public repository?

Question 3

What did the episode say was the main security implication of Mercedes-Benz leaving a GitHub token in a public repository?

It revealed customer billing records stored in a separate cloud service. It exposed only a single staging repository with no secrets inside. It allowed write-only access to open-source mirrors but not internal code. It granted unrestricted access to the company’s private source code repositories.

Question 4: What did Alex Stamos say the Microsoft breach blog post was really describing when it mentioned notifying other targeted organizations?

Question 4

What did Alex Stamos say the Microsoft breach blog post was really describing when it mentioned notifying other targeted organizations?

The disclosure was limited to password spraying against employee laptops. Only on-premises Exchange Server systems were affected by the same actor. A single test tenant was probed but no customer environments were affected. Multiple Microsoft cloud tenants were compromised through the same flaws.

Question 5: What was Steve’s recommendation regarding storing TOTP secrets inside Bitwarden?

Question 5

What was Steve’s recommendation regarding storing TOTP secrets inside Bitwarden?

Store TOTP secrets only in a separate standalone hardware token. Use it if necessary, because it is better than not using TOTP at all. Use it only for password resets, not for login authentication. Avoid it entirely because it makes TOTP unusable for serious accounts.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.