SN 1002: Disconnected Experiences - "Nearest Neighbor" Attack, Repo Swatting, the Return of Recall

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 26 November 2024

⏱️ 152 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

What's the new "nearest neighbor" attack and how do you defend against it?
Let's Encrypt just turned 10. What changes has it wrought?
Now the Coast Guard is worried about Chinese built ship-to-shore cranes.
Pakistan becomes the first country to block Bluesky.
There's a new way to get Git repos "swatted" and removed.
Who's to blame for Palo Alto Networks' serious new 0-day vulnerabilities?
If you have any of these six D-Link VPN routers, unplug them immediately!
It turns out that VPN apps are against Shariah Law. Who knew?
The Return of Windows Recall. What are we learning now?
How many of today's systems remain vulnerable to last year's most popular exploits?
We share and respond to a bunch of terrific feedback from our listeners.
What are Microsoft's "Connected Experience" and why might you choose to disconnect from them?

Show Notes - https://www.grc.com/sn/SN-1002-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. He's in love with these Chinese cranes that they use at container ports.
0:08.8	But he says there's a problem. Apparently there's a Chinese back door. Oh no. We'll also talk about the nearest neighbor attack and a warning about a new feature of Microsoft Windows they call connected experiences.
0:24.0	Steve says it's a recipe for disaster.
0:26.4	All of that and more coming up next on security now.
0:31.9	Podcasts you love from people you trust.
0:36.3	This is Twitter.
0:41.4	This is Security Now with Steve Gibson.
0:44.5	Episode 102 recorded Tuesday, November 26th, 2024.
0:50.3	Disconnected Experiences.
0:53.6	It's time for Security Now, the show where we talk about your security, your privacy, how the internet works, how computers work, a little bit of sci-fi thrown in, maybe some vitamin D.
1:04.8	And it's all because of this guy, the man in charge, our very own Steve Gibson.
1:09.5	Hi, Steve.
1:10.6	Hey, Leo, you know, when you're saying
1:12.5	security now, you're leaning back and it gives you kind of a nice, like the mic, that's right,
1:18.9	a little Doppler shift effect there. I learned that from Adele. It's so funny because I realized
1:24.9	now, we'd had a photo meetup in New York City.
1:29.5	Oh, gosh, a couple months ago.
1:30.5	A couple months ago, September.
1:31.9	And I would look back at the pictures and there were a bunch of people doing the live
1:35.4	long and prosperous sign.
1:36.9	And I realized that has become not just the security now thing, but everybody now.
1:42.4	It's early.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.