SN 913: A Fowl Incident - DDoS'ing Fosstodon, Strategic Objective 3.3, CISA's Covert Red-Team
Security Now (Audio)
Leo Laporte
4.6 • 2.1K Ratings
🗓️ 7 March 2023
⏱️ 108 minutes
🧾️ Download transcript
Summary
- Picture of the Week.
- DDoS'ing Fosstodon.
- DDoS for Hire takedowns.
- TikTok Insanity.
- Illegal Warrantless Surveillance.
- Strategic Objective 3.3.
- GitHub Secret Scanning.
- CISA's Covert Red-Team.
- What's left?
- What's old is new again.
- TCG TPM vulnerabilities.
- WordPress "All In One SEO".
- Russia fines Wikipedia.
- A Fowl Incident.
Show Notes: https://www.grc.com/sn/SN-913-Notes.pdf
Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Transcript
Click on a timestamp to play from that location
| 0:00.0 | It's time for Security Now Steve Gibson is here to talk about a DDoS attack against |
| 0:06.0 | Mastodon. Steve's take on blocking TikTok. Does it accomplish anything? Github's new |
| 0:14.0 | Secret Scanning service, something we should all probably be running. The latest WordPress |
| 0:19.2 | plugin that's threatening more than a million sites, Russia finding Wikipedia and Steve digs |
| 0:26.4 | Steve on the case of the chicken bone points or something. It's all coming up next on Security Now. |
| 0:36.4 | Podcasts You Love. From People You Trust. This is Twit. |
| 0:46.4 | This is Security Now with Steve Gibson, Episode 913, recorded Tuesday, March 7, 2023, a foul incident. |
| 1:00.4 | Security Now is brought to you by Thinks Tkinari, detects attackers on your network while avoiding |
| 1:07.4 | irritating false alarms. Get the alerts that matter. Pretend to present off and a 60-day money-back |
| 1:12.4 | guarantee. Go to canary.tools slashtwit and enter the code Twit in the how do you hear about this box. |
| 1:18.4 | And by DRAWDA. Too often security professionals undergo the tedious arduous test of manually collecting |
| 1:26.4 | evidence with DRAWDA. Say goodbye to the days of manual evidence collection and hello to automation. All done at DRAWDA Speed. |
| 1:34.4 | Visit DRAWDA.com slashtwit to get a demo and 10% off implementation. |
| 1:40.4 | And by Collide. Collide is a device trust solution that ensures that if a device isn't secure, it can't access your apps. |
| 1:51.4 | It's zero trust for Octa. Visit collide.com slash security now and book a demo today. |
| 1:58.4 | It's time for security now. You've been waiting all week so why to hear from this guy right here. Steve Gibson, our securityarian. |
| 2:06.4 | Oh, whoa. Our secretary of security. |
| 2:11.4 | I. |
| 2:13.4 | Gerrateria. Every week we get together. Steve explains why the world's going to hell in a hand basket. |
| 2:21.4 | I suspect Steve I may be wrong, but I suspect you will be answering some pretty important questions this week. |
| 2:28.4 | This week's answers are many as it turns out. How has Fostodon survived a sustained DDoS attack or has it? |
| 2:38.4 | What luck have Euro poll and the FBI had with taking down DDoS for higher services and have they returned? |
... |
Please login to see the full transcript.
Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.
Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.
Copyright © Tapesearch 2025.