SN 948: What if a Bit Flipped? - Privacy Badger, Downfall, OpenVPN, Windshield Barnacle, Article 45

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 14 November 2023

⏱️ 132 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Privacy Badger blocks trackers on news sites and prevents browser exposure to unwanted domains like TikTok and Datadog.
No major updates on EU's controversial Article 45 in eIDAS 2.0. Industry pushback continues as implementation would threaten encryption.
Cryptocurrency exchange Poloniex lost $130M in a hot wallet hack, the 14th largest crypto theft.
Decentralized finance platform Raft lost $3.3M due to an exploit.
Crook operated website iotaseed.io to generate wallet seed phrases, then recorded and stole them.
New Intel processor vulnerability called Downfall leaks encryption keys and sensitive data between users on shared systems.
Russia moves to formally ban all VPN use in the country.
Two new flaws found in OpenVPN software, one allowing memory access.
SpinRite development paused as DOS and Windows versions are complete.
Understanding assembly language helps malware analysis and exploit development, but high-level decompilers also useful.
Quantum-safe symmetric cryptography is limited compared to asymmetric crypto.
EU's Article 45 allows transparent decryption and traffic interception, supposedly for security purposes.
"Windshield Barnacle" parking enforcement device uses suction cups and 1000 lbs of force to immobilize vehicles until parking tickets are paid.
Sci-fi book series Aeon 14 by M.D. Cooper offers fun military space opera adventure.
27-year-old theoretical crypto attack now shown practical. Passive network observers can steal SSH RSA keys if faulty signature generated, allowing impersonation.

Show Notes - https://www.grc.com/sn/SN-948-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. You remember Specter and
0:04.4	meltdown? Nobody ever exploited those. Well there's a new speculative execution
0:09.3	flaw called downfall and it's out there in the Wild Steve has all the details.
0:15.2	We'll also talk about a brand new sci-fi novel Steve loves is telling you all about
0:22.2	it why you would never want a windshield barnacle,
0:25.0	and finally, by cosmic rays could be a real bane of cryptography.
0:32.0	It's all coming up next on security now.
0:37.0	Podcasts you love from people you trust.
0:41.0	This is Twit.
0:47.0	This is Security Now with Steve Gibson,
0:50.0	episode 948,
0:52.0	recorded Tuesday, November 14th, 2023. What if a bit flipped?
1:00.2	This episode of Security Now is brought to you by
1:03.4	Collide. Collide is a device trust solution for companies with Octa
1:06.8	and Collide insurers if a device isn't trusted and secure
1:10.7	it can't log into your cloud apps.
1:13.4	Visit collide.com slash security now
1:16.4	to book an on-demand demo today.
1:19.2	And by Bitwarden, the open source password manager to help you stay safe online.
1:24.8	Get started with a free teams or enterprise plan trial or get started for free across all
1:29.3	devices as an individual user at bitwarden dot com slash twit and by IT pro TV now called
1:37.9	ACI learning. ACI's new cyber skills is training for everyone not just the pros
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.