Light

Episode #994 Quiz

Recall's Re-Rollout
Date: 2024-10-01 | Length: 2 hrs | Episode page at twit.tv

About this episode

Linux CUPS RCE bugs chain unauthenticated printer discovery, malicious IPP URLs, driver installation, and PPD code execution via exposed UDP 631, mitigated by disabling CUPS-browsed and blocking the port. Microsoft’s Recall now uses opt-in snapshots, TPM-sealed VBS enclaves, Windows Hello, protected processes, and per-snapshot encryption with independent review.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what specific network exposure must be present for the CUPS-browsed exploit chain to be reachable from the Internet?

Question 1

According to the episode, what specific network exposure must be present for the CUPS-browsed exploit chain to be reachable from the Internet?

TCP port 631 must be accessible and the print spooler must be authenticated UDP port 515 must be accessible and printer sharing must be enabled UDP port 631 must be accessible and the vulnerable service must be listening TCP port 515 must be accessible and the device must be joined to a domain

Question 2: What did Microsoft say about the ability to remove Recall entirely in the re-rollout?

Question 2

What did Microsoft say about the ability to remove Recall entirely in the re-rollout?

It is controlled only by a BIOS setting on secured-core PCs It is a deliberate feature available through Optional Features settings It remains impossible unless the PC is wiped and reinstalled It is only available to enterprise-managed Windows 11 Pro systems

Question 3: In Microsoft’s revised Recall architecture, what technology is used to isolate the secure processing environment that handles snapshots and keys?

Question 3

In Microsoft’s revised Recall architecture, what technology is used to isolate the secure processing environment that handles snapshots and keys?

Virtualization-Based Security Enclaves backed by the same hypervisor as Azure BitLocker-only disk partitions backed by TPM-protected file encryption Windows Sandbox instances backed by a separate user-mode container AppContainer sandboxes backed by browser-style site isolation

Question 4: How does the episode say the Recall User Activity API works for app resumption?

Question 4

How does the episode say the Recall User Activity API works for app resumption?

Apps must opt in by calling UserActivity.CreateSession to create history records Users manually export and import activity bundles through Recall settings Recall infers app state automatically from screen snapshots without developer participation Windows restores a full process memory image for any app with no code changes

Question 5: What did the episode say about Telegram’s updated privacy policy after Durov’s detention in France?

Question 5

What did the episode say about Telegram’s updated privacy policy after Durov’s detention in France?

It will now disable end-to-end encryption for all chats worldwide It will now decrypt private messages on demand for any regulator It will now comply with court orders to share phone numbers and IP addresses with law enforcement It will now publish all subscriber metadata in its public transparency reports

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.