Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the episode, what is the primary security issue demonstrated by the Gainsight/Salesforce breach involving over 200 companies?

The breach was caused by exploiting a zero-day vulnerability in Salesforce's cloud infrastructure. Employees of Salesforce were tricked by social engineering, leading to direct access to customer data. The compromise originated from an affiliated third-party app's external connection to Salesforce, leading to unauthorized access via API tokens. The Salesforce platform had a critical vulnerability allowing direct breaches of its core system.

Question 2

What is the main security improvement Cisco announced in their 'Resilient Infrastructure' initiative as detailed in the episode?

Allowing customers to choose between secure and insecure settings without any default preference. Making secure configurations, protocols, and features the default and providing proactive alerts when insecure choices are made, with eventual removal of insecure options. Implementing mandatory hardware token authentication for all router administrative access. Complete removal of all default security features to increase performance speed.

Question 3

Regarding Passkeys, passwords, and YubiKeys discussed in the episode, which best practice is recommended for highest security with usability?

Always use only passwords for all sites to keep credentials simple and uniform. Use a YubiKey for every site, including low-value accounts, to maximize uniform hardware security. Use Passkeys whenever supported, store them in a cross-platform password manager, and reserve YubiKeys for highly sensitive accounts where physical presence is acceptable. Passkeys are inherently insecure and should never be used outside of hardware tokens.

Question 4

What is the significance of NAT routing in the effectiveness of the GreyNoise 'botcheck' service described in the episode?

NAT routing allows botcheck to evaluate the behavior of all devices on a LAN by checking only the single public IP shared by the network. NAT routing prevents the detection of any bot activity against devices behind a router, making botcheck ineffective. The botcheck service only works on networks that do not use NAT routing. NAT routing forces GreyNoise to scan each individual device separately to identify bots.

Question 5

What technical reason does the episode give for why unpowered SSDs lose their data over long storage periods, despite common beliefs?

Unpowered SSDs autonomously rewrite their own data periodically to maintain cell charge, preventing data loss. SSD data retention degradation primarily depends on storage temperature, with higher temperatures accelerating charge loss in memory cells. Keeping SSDs powered on prevents data degradation by allowing controllers to refresh marginal cells continuously. The SSD controller automatically deletes old data from cells it deems unused, leading to data loss when unpowered.

Cancel

Episode #1054 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5