Light

Episode #973 Quiz

Not So Fast
Date: 2024-05-07 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

GPS jamming and spoofing use local high-power transmitters to overwhelm satellite navigation, disrupting aviation, shipping, and timing-dependent systems; mitigations include inertial navigation, visual redundancy, and shielding receivers from ground interference. A claimed VPN “decloak” attack abuses DHCP Option 121 routing updates on local LANs, not cryptography, affecting most platforms except Android.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to Steve's explanation of the VPN attack, what exact DHCP route-setting mechanism lets a hostile LAN device redirect traffic away from a VPN's virtual interface?

Question 1

According to Steve's explanation of the VPN attack, what exact DHCP route-setting mechanism lets a hostile LAN device redirect traffic away from a VPN's virtual interface?

It uses DHCP Option 3 to override the default gateway and disable the VPN tunnel directly It uses DHCP Option 33 to install classful routes that always outrank VPN tunnel routes It uses DHCP Option 121 to install classless static routes with higher priority than the VPN's default /0 route It uses DHCP Option 6 to replace DNS lookups and force traffic through the local gateway

Question 2: What did Steve say makes the TunnelVision attack able to persist even after a VPN connection is already established?

Question 2

What did Steve say makes the TunnelVision attack able to persist even after a VPN connection is already established?

The DHCP server can rewrite packets already inside the encrypted tunnel without the VPN detecting it The VPN control channel stays on the physical interface while route updates happen later through DHCP lease renewal The VPN encryption keys are renegotiated only after the next reboot, leaving current traffic exposed The VPN kill switch automatically delays teardown until all open sockets have closed

Question 3: Which operating system did Steve say is not affected by the TunnelVision/Option 121 attack because of missing support for that DHCP option?

Question 3

Which operating system did Steve say is not affected by the TunnelVision/Option 121 attack because of missing support for that DHCP option?

macOS, because it only accepts routes from manually configured profiles iOS, because Apple blocks DHCP route injection at the network stack Android, because it does not support DHCP Option 121 Windows, because it ignores DHCP-provided static routes by default

Question 4: What explanation did the listener Willie Scott give for passwords reappearing in iCloud Keychain after being deleted?

Question 4

What explanation did the listener Willie Scott give for passwords reappearing in iCloud Keychain after being deleted?

A mismatched Apple ID caused iCloud to merge credentials from a family sharing account A macOS system update was restoring deleted Keychain items from Time Machine snapshots An older iPhone still signed into the same iCloud account was syncing Keychain data A stale Chrome profile was repopulating the Keychain from Google Password Manager

Question 5: What was the key reason Steve said Google delayed the end of third-party cookies in Chrome?

Question 5

What was the key reason Steve said Google delayed the end of third-party cookies in Chrome?

Chrome had not yet finished implementing the Topics API and needed more engineering time The UK ordered Google to keep third-party cookies indefinitely because publishers demanded it The CMA and ICO still needed time to review evidence and testing results under Google's commitments Google chose to wait for a new browser standard that would replace cookies across all vendors

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.