Light

Episode #999 Quiz

AI Vulnerability Discovery
Date: 2024-11-05 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

Episode 999 highlighted AI-assisted vulnerability discovery, describing Google’s Big Sleep finding a stack buffer overflow in SQLite via LLM-guided code navigation, fuzz-input generation, and debugging. It also covered 0patch’s in-memory micropatches for Windows 10 after support ends, and warned about malicious Chrome extensions, dangerous RDP files, and clipboard-driven CAPTCHA social engineering.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, why did some subscribers unexpectedly stop receiving Steve Gibson's podcast announcement emails?

Question 1

According to the episode, why did some subscribers unexpectedly stop receiving Steve Gibson's podcast announcement emails?

Their mail providers marked the messages as spam because they contained too many external hyperlinks. Their mail providers rejected the messages because the mailing list exceeded a new sender quota. Their mail providers automatically followed the one-click unsubscribe link and triggered immediate removal. Their mail providers stripped the messages because the unsubscribe link appeared in the email headers only.

Question 2: What was the key technical hazard of the malicious .RDP attachment used in the Midnight Blizzard campaign described in the episode?

Question 2

What was the key technical hazard of the malicious .RDP attachment used in the Midnight Blizzard campaign described in the episode?

It installed a signed kernel driver that disabled endpoint protection before opening an outbound tunnel. It configured a connection that exposed local resources like drives, clipboard, printers, and authentication material to the remote server. It exploited a buffer overflow in the Windows Remote Desktop client to gain code execution before the session began. It abused an email parser bug that auto-opened the RDP session without any user interaction.

Question 3: What specific capability did Firefox 132 add that resolved the discrepancy Steve had previously observed in third-party cookie handling?

Question 3

What specific capability did Firefox 132 add that resolved the discrepancy Steve had previously observed in third-party cookie handling?

It now blocks all first-party cookies whenever Enhanced Tracking Protection is turned on. It now disables cookies only for sites loaded over HTTP and leaves HTTPS cookies unchanged. It now encrypts cookies by default to prevent browser-side inspection of tracking data. It now blocks third-party cookie access when Enhanced Tracking Protection Strict mode is enabled.

Question 4: Which of the following best matches the behavior of the 'Hide YouTube Shorts' extension after it became malicious?

Question 4

Which of the following best matches the behavior of the 'Hide YouTube Shorts' extension after it became malicious?

It collected full visited URLs and transmitted them to an external AWS-hosted service. It only recorded YouTube page titles and never transmitted authentication tokens or parameters. It only redirected users away from Shorts and never touched browsing history or form data. It replaced YouTube search results locally with a filtered DOM view and kept all data on the device.

Question 5: What did Google's AI-based Big Sleep system reportedly discover in SQLite?

Question 5

What did Google's AI-based Big Sleep system reportedly discover in SQLite?

A use-after-free in the production release of SQLite's query planner. A SQL injection flaw in SQLite's parsing of untrusted statements. A race condition in SQLite's journaling code that required kernel assistance to exploit. A stack buffer overflow in a development branch of the library.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.