SN 1060: 3-Day Certificates - The Rise of AI Programming

Security Now (Audio)

Leo Laporte

Spyware, Encryption, Malware, Twit, Cyber Crime, Technology, Security, Leo Laporte, Steve Gibson, Hacking

4.6 • 2.1K Ratings

🗓️ 13 January 2026

⏱️ 159 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Why are code signing certificates suddenly so expensive, short-lived, and tangled in red tape? Leo Laporte and Steve Gibson dig into Microsoft's "three-day certificates," the hidden costs for developers, and the security tradeoffs no one saw coming.

A look at Microsoft's Azure cloud code signing.
California implements DROP, global data broker opt-out.
Where's the town of "Whata Bod" Idaho.
iOS built-in Mail app worked itself out of a job.
A 30-minute tutorial for non-coders about AI coding.
Claude Code appears to be winning over the AI coding world.
Various listener musings on code signing.
A bit of Magnesium feedback.
What use are 3-day code signing certs?

Show Notes - https://www.grc.com/sn/SN-1060-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. We're going to take a look at code signing. Crazy.
0:06.9	We're going to find out what about Idaho has going for it. Steve's going to talk about these three-day code signing certificates.
0:15.4	And I'm going to give you a little demo of Claude Code. I've been using it to write applications.
0:20.6	All of that coming up next on Security Now.
0:26.1	Podcasts you love. From people you trust. This is Twitter.
0:35.6	This is Security Now with Steve Gibson. Episode 160 recorded Tuesday, January 13th, 2026.
0:44.2	Three-day certificates. It's time for Security Now, the show where we cover the latest
0:49.7	in security news. We attempt to protect you and your loved ones from bad guys in the outside world.
0:58.1	We even talk a little bit about TV shows, books, and vitamins with this guy.
1:02.8	It's whatever Steve's into, frankly, Mr. Steve Gibson, hello from GRC.com.
1:08.3	Great to be with you again for, well, I'm'm not supertitious so the fact that this is the
1:13.2	13th uh is just fine with me it's not a friday tuesday yeah that's not a bad
1:19.3	i did have bad luck yesterday did you hear me talking about this on mack break weekly i got
1:24.0	fished yesterday no and it's funny because i forgot to mention it it's not in the show
1:30.7	notes but i saw if i got a fishing text which said that what was it uh the amazon it was
1:40.0	supposedly from amazon saying that the quality of something that I'd ordered did not meet
1:45.5	their standards.
1:46.9	And so they were giving me a refund to click here.
1:50.6	And it was a plus 9-1 something, something, you know, phone number.
1:56.2	So it was like, what?
1:57.3	It's not.
1:58.0	But, I mean, again, I was like, uh, I, they kind of had me almost.
	...

Transcript will be available on the free plan in 22 days. Upgrade to see the full transcript now.

Previous episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.