SN 908: Data Operand Independent Timing - Old Android apps, Kevin Rose, iOS 6.3 and FIDO, Hive hacked

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 31 January 2023

⏱️ 105 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Android to start blocking old and unsafe apps.
Microsoft to block Internet sourced Excel add-ins.
An example of saying "no" even when it may hurt.
Hacked Wormhole funds on the move.
Kevin Rose Hacked.
Facebook will be moving more users into E2EE.
iOS 6.3 and FIDO.
Scan thy Citizenry.
The Hive ransomware organization takedown.
Errata.
Closing the Loop.
SpinRite.
Data Operand Independent Timing.

Show Notes: https://www.grc.com/sn/SN-908-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now, dude! Steve Gibson is here. We've got a great show coming up for you
0:05.7	We're gonna talk about our old friend Kevin Rose who fell victim to a fishing attack. Oh, no
0:13.3	The FBI with a spectacular success in Russia
0:17.6	You know, Russians are pretty darn mad and then a new feature in Intel and ARM processors that could break crypto
0:25.6	It's all coming up next on security now podcasts you love from people you trust
0:35.0	This is twit
0:40.5	This is security now with Steve Gibson episode 908 recorded Tuesday January 31st, 2023
0:48.5	Data operand independent timing
0:51.4	Security now is brought to you by Melissa over 10,000 clients worldwide in industries like retail education
1:00.8	Healthcare insurance finance and government rely on Melissa for full spectrum data quality and
1:08.0	ID verification software
1:10.0	Make sure your customer contact data is up-to-date
1:13.1	Get started today with 1000 records clean for free at Melissa.com
1:17.7	Slash twit and by coli coli is an endpoint security solution that uses the most powerful
1:27.0	untapped resource in IT
1:29.0	end users visit coli.com slash security now to learn more and activate a free 14-day trial today no credit card required
1:39.0	It's time for security now the show we cover the latest insecurity news with the man in charge of insecurity
1:46.2	Mr. Steve Gibson I Steve
1:49.4	Hello, Leo. I'm very secure with my insecurity or this is the other way around. I don't know. I don't know
1:56.0	We're going to have some serious geeky fun today for this fine. We just squeezed one last
2:04.4	podcast into
2:06.1	January so here we are on the 31st with this episode 908
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.