Light

Episode #974 Quiz

Microsoft's Head in the Clouds
Date: 2024-05-14 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Analysis of 3.4 million breached four-digit PINs showed extreme human predictability: 0000, 1234, birth years, and dates dominate; the top 20 PINs represent 27% of all use. eLORAN, a high-power terrestrial backup to GPS, offers UTC-synchronized, hard-to-jam positioning. Microsoft’s cloud security flaws exposed expired keys, weak logging, and overdue hardening.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the 3.4 million four-digit PIN heat map, what did the bright diagonal line from lower-left to upper-right represent?

Question 1

In the 3.4 million four-digit PIN heat map, what did the bright diagonal line from lower-left to upper-right represent?

PINs whose first two digits matched their last two digits PINs formed from month and day values in calendar order PINs beginning with birth years from 1900 through 1999 PINs using repeated low digits such as 0000 through 1111

Question 2: Which four-digit PINs were specifically called out as solitary bright spots on the heat map, in addition to the highly obvious 0000 and 9999?

Question 2

Which four-digit PINs were specifically called out as solitary bright spots on the heat map, in addition to the highly obvious 0000 and 9999?

1111 and 2222 1234 and 4321 2000 and 2001 6969 and 1010

Question 3: According to the episode, what made the State Department's 'Big Yellow Taxi' alert possible in the Microsoft Exchange Online intrusion investigation?

Question 3

According to the episode, what made the State Department's 'Big Yellow Taxi' alert possible in the Microsoft Exchange Online intrusion investigation?

A purchased G5 license exposing enhanced MailItemsAccessed logging A consumer Microsoft 365 plan including the same audit data A custom Azure policy automatically mirroring all mailbox events to SIEM A default tenant setting exposing all mailbox content to all administrators

Question 4: How many distinct hypotheses did Microsoft develop to investigate how the stolen 2016 MSA signing key had been obtained?

Question 4

How many distinct hypotheses did Microsoft develop to investigate how the stolen 2016 MSA signing key had been obtained?

18 hypotheses 46 hypotheses 503 hypotheses 22 hypotheses

Question 5: What did the CSRB recommend Microsoft leadership do internally to avoid crowding out security work?

Question 5

What did the CSRB recommend Microsoft leadership do internally to avoid crowding out security work?

Shift all security work to external auditors to preserve internal engineering capacity Deprioritize feature development until security improvements were made Expand feature development to accelerate customer migration to cloud services Freeze cloud services until every legacy tenant and app was manually reviewed

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.