Light

Episode #977 Quiz

A Large Language Model in Every Pot
Date: 2024-06-04 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

The episode covered a Stack Overflow abuse campaign distributing a malicious PyPI package that installs an information stealer via obfuscated Base64 and runtime.exe, a GlobalTrust CA trust revocation in Chrome for new TLS certificates after June 30, and Recall’s SQLite database in AppData/CoreAIPlatform, which can be exfiltrated, shared across accounts, and abused by malware.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to Steve's explanation of the new GRC mail system, what did Gmail users who had bounces need to register at GRC in order to be accepted by the inbound filter?

Question 1

According to Steve's explanation of the new GRC mail system, what did Gmail users who had bounces need to register at GRC in order to be accepted by the inbound filter?

Their aliased domain address, not the Gmail account that sent the mail A one-time disposable address from SimpleLogin or a similar service A reply-to address manually set in the mail client Their underlying Gmail account, not their aliased domain address

Question 2: What did Troy Hunt's Have I Been Pwned alert report about the Telegram Combolists breach that Steve received for GRC.com?

Question 2

What did Troy Hunt's Have I Been Pwned alert report about the Telegram Combolists breach that Steve received for GRC.com?

Sixteen GRC.com addresses were found among 36,146,809 breached email accounts Sixteen GRC.com addresses were found among 361,468,099 breached email accounts Six GRC.com addresses were found among 361,468,099 breached email accounts Sixteen GRC.com addresses were found among 122GB of malware logs only

Question 3: How did Kevin Beaumont say Recall stores and organizes the captured activity on the PC?

Question 3

How did Kevin Beaumont say Recall stores and organizes the captured activity on the PC?

It writes OCR'd content into an SQLite database in the user's CoreAIPlatform folder It uploads compressed screenshots into a cloud database under the user's OneDrive folder It keeps the data in a browser cache protected by Microsoft Edge InPrivate mode It stores only metadata in the registry and leaves the screenshots unindexed

Question 4: What was Steve's main theory about why Microsoft wants Recall to keep collecting a user's activity over time?

Question 4

What was Steve's main theory about why Microsoft wants Recall to keep collecting a user's activity over time?

It is meant to build a corpus for a future personal local large language model It is meant to sync a user's timeline to the next device as a cloud backup feature It is meant to provide a short-term forensic cache for enterprise incident response It is meant to replace Windows Defender with a remote threat-intelligence service

Question 5: What limit did Google announce for trust in new TLS certificates issued by GlobalTrust?

Question 5

What limit did Google announce for trust in new TLS certificates issued by GlobalTrust?

Chrome will continue trusting GlobalTrust until the end of the year without changes Chrome will stop trusting all GlobalTrust certificates immediately, including old ones Chrome will stop trusting any new GlobalTrust certificates issued after June 30, 2024 Chrome will stop trusting only certificates issued before June 30, 2024

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.