SN 930: Rowhammer Indelible Fingerprinting - MOVEit SQLi flaw, China's OpenKylin v1, Firefox 115, Syncthing

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 11 July 2023

⏱️ 129 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Picture of the Week.
Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software.
And as for MOVEit...
What's a "Rug Pull" ??
"Avast, ye Matey"
China's OpenKylin v1.
TootRoot!
Firefox 115.
Did Russia Disconnect?
Use some honey if you want to catch some flies.
Cryptocurrency losses.
International Consumer Data Transit.
Apple's emergency update retraction.
Syncthing Revisited.
Closing the Loop.
SpinRite's first RTM release.
RTOS-32.
Rowhammer Indelible Fingerprinting.

Show Notes: https://www.grc.com/sn/SN-930-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now, Steve Gibson is here. There's a whole bunch of stuff to talk about.
0:05.6	If you thought cookies were bad, we'll hear about indelible,
0:09.7	Rohammer,
0:10.7	fingerprinting. Steve will also talk about his usage of sink thing. He's got a pretty good work flow for backing up all of his
0:18.3	assembly language and then yes another critical
0:22.6	SQL flaw in
0:24.6	move it file transfer. Wow all of that and a lot more coming up next with security now.
0:33.8	Podcasts you love from people you trust.
0:38.0	This is twit.
0:43.7	This is security now with Steve Gibson episode 930 recorded Tuesday to 11th, 2023.
0:52.6	Rohammer indelible fingerprinting.
0:56.6	This episode of security now is brought to you by Thinkst Canary because thousands of ignored alerts help nobody.
1:04.2	Get the one alert that matters when somebody's inside your network for 10% off and a 60 day money back guarantee.
1:12.0	Go to canary.tools-twit and enter the code twit in the how did you hear about his points and buy
1:19.0	Bitward. Get the password manager that offers a robust and cost effective solution that drastically increases your chances of staying safe online.
1:27.9	It started with a free trial of teams or enterprise plan or gets started for free across all devices as an individual user at bitwarden.com-slashtwit.
1:38.9	And by ACI learning IT skills are outdated in about 18 months so future-proof your business by staying ahead of the competition
1:47.8	with customizable binge-worthy training visit go.acilarning.com-slashtwit to fill out the form and get more information on a free two week training trial for your team.
1:59.0	It's time for security now the show where we get Steve Gibson in here to tell us what's going down.
2:04.6	Steve, those are the show for how many years now Steve?
2:09.0	We're closing in on the end of year 18.
2:15.2	Whenever I say that I get corrected by a lane. She says no you started in we started in 05 so 18 years.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.