Light

Episode #975 Quiz

312 SCIENTISTS & RESEARCHERS RESPOND
Date: 2024-05-21 | Length: 2 hrs | Episode page at twit.tv

About this episode

Chrome patched three in-the-wild zero-days, including V8 type confusion and use-after-free flaws, prompting discussion of Edge’s enhanced security mode, which disables JIT and adds Hardware-enforced Stack Protection and Arbitrary Code Guard on unfamiliar sites. The episode also highlighted Google’s search degradation, XP’s rapid compromise, insecure laundry APIs, and CSAM-backdoor risks.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What specific mechanism did Google note was being exploited in the Chrome zero-day CVE-2024-4947 discussed in this episode?

Question 1

What specific mechanism did Google note was being exploited in the Chrome zero-day CVE-2024-4947 discussed in this episode?

A sandbox escape in Chrome's network service An out-of-bounds write bug in Chrome's V8 JavaScript engine A type confusion flaw in Chrome's V8 JavaScript engine A use-after-free flaw in Chrome's Visuals component

Question 2: Which browser setting did Microsoft describe as disabling JIT compilation and adding OS protections on unfamiliar sites?

Question 2

Which browser setting did Microsoft describe as disabling JIT compilation and adding OS protections on unfamiliar sites?

Secure DNS mode in Microsoft Edge Enhanced Security mode in Microsoft Edge Application Guard mode in Microsoft Edge Strict Tracking Prevention mode in Microsoft Edge

Question 3: What browser parameter did BleepingComputer identify as forcing Google Search into the cleaner Web results mode?

Question 3

What browser parameter did BleepingComputer identify as forcing Google Search into the cleaner Web results mode?

safe=web udm=14 tbm=web hl=web

Question 4: According to the episode, what flaw allowed CSC ServiceWorks laundry users to add large balances and start machines without payment?

Question 4

According to the episode, what flaw allowed CSC ServiceWorks laundry users to add large balances and start machines without payment?

Security checks were performed only by the client app Machine controllers accepted only unsigned Bluetooth commands Payment cards were bypassed through an exposed vending protocol Balances were derived from a weak checksum in the mobile app

Question 5: What statistical objection did the scientists and researchers raise to the EU proposal's repeated-detection idea for reducing false positives?

Question 5

What statistical objection did the scientists and researchers raise to the EU proposal's repeated-detection idea for reducing false positives?

False positives would still be enormous at messaging scale Repeated detection would eliminate the need for client-side scanning High-risk categorization would confine scanning to a tiny user subset False positives would disappear because repeated events are independent

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.