Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

What primary reason does Steve Gibson give for Apple's decision to disable Advanced Data Protection (ADP) for new users in the UK?

Because ADP had unfixable security vulnerabilities that risked user data. To improve compatibility with legacy Apple devices that do not support ADP. To uniformly remove ADP globally due to technical difficulties in encryption management. To comply with the UK government's demand to enable legal access to encrypted iCloud backup data.

Question 2

Regarding vulnerabilities discovered in OpenSSH discussed in the episode, which statement best captures their nature and recommended mitigation?

Vulnerabilities that only affect FreeBSD systems, remediated by replacing FreeBSD with another OS. A critical remote code execution and user privilege escalation, requiring disabling VerifyHostKeyDNS and uninstalling OpenSSH temporarily. A phishing vulnerability in SSH clients affecting user credential entry, mitigated by disabling SSH key authentication. Two vulnerabilities include an attackable VerifyHostKeyDNS option and a pre-auth denial-of-service attack, with mitigation by updating to OpenSSH 9.9p2 and setting VerifyHostKeyDNS to 'no'.

Question 3

What critical security failure makes the FREEDOM Administration Login access control system vulnerable to remote attacks?

Lack of logging and audit controls preventing detection of unauthorized access. Encryption keys stored locally in plaintext on the device, enabling remote decryption of communications. Use of hardcoded default credentials 'freedom:viscount' exposed on Internet-facing web admin panels with no enforced password change. Single-factor authentication combined with exposure only on an internal LAN interface.

Question 4

About the intrusion of Chinese "Salt Typhoon" hackers into U.S. telecommunications, what key vulnerability did they exploit for persistent access?

Zero-day remote code execution in custom telecom proprietary software unrelated to Cisco IOS. Man-in-the-middle attacks on telecom internal communication encrypted with outdated TLS versions. Long-unpatched Cisco IOS XE Web UI privilege escalation vulnerabilities and exposed web management interfaces. Default weak SNMP community strings on telecom routers allowing remote code execution.

Question 5

Which process enabled the North Korean Lazarus Group to steal $1.5 billion from the Bybit cryptocurrency exchange, despite multi-person authorization controls?

Stealing private keys directly by exploiting cold wallet air gaps through physical access at Bybit's datacenter. Compromising each multi-sig signer's devices with malware and altering the wallet software UI to show fake transaction details, leading to unwitting approval. Phishing Bybit's CEO to obtain administrator credentials, then performing unauthorized transfers without requiring multi-sig. Brute force cracking of wallet encryption keys due to weak password policies on Bybit's systems.

Cancel

Episode #1014 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5