SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 13 August 2024

⏱️ 139 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Sitting Ducks DNS attack
A Bad RCE in another Microsoft server
SinkClose
The CLFS.SYS BSoD
IsBootSecure
Rethinking Revocation

Show Notes - https://www.grc.com/sn/SN-987-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now Steve Gibson is here. I am here in my new attic studio
0:04.8	but we have lots to talk about including a new attack called Sitting Duck. Are you a
0:10.4	sitting duck? Why all AMD, almost all AMD chips
0:14.8	have a critical microcode bug that is about as bad as you can get.
0:20.7	Microsoft decides not to fix a simple Windows bug that can cause a blue screen of death or worse.
0:26.0	And then we'll talk about certificate revocation.
0:30.0	Turns out it's a hard computer science problem. for some reason Let's encrypt has decided to do it a different way
0:37.0	Stay tuned security now is coming up next
0:41.8	Podcasts you love from people you trust.
0:45.0	This is Twit.
0:48.0	This is Twitter.
0:50.0	This is Security Now with Steve Gibson, episode 987, recorded August 13, 2024.
0:59.0	Rethinking Revocation.
1:02.0	It's time for security now,
1:04.3	the show we cover your security, your privacy,
1:06.2	your safety, your online habitation
1:09.4	at all times with this man right here. Steve Gibson of gRC.com. Hi Steve.
1:16.7	Hello Leo great to be with you again for now wait for it the last episode of our 19th year.
1:28.2	Holy come only so you're saying as of next week which will be the 20th, we will be in our 20th, our
1:36.3	birthday will have been the previous day. Monday, August 19th of 2005 was a day that will live in infamy
1:46.3	episode number one honey monkeys or without number two I think
1:50.3	Wow. Oh I think that was all a 15 minute podcast.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.