<ul> 
<li>Privacy and Funding Challenges Facing Signal Messaging App</li> 
<li>Loss of Advertisers for Twitter After Controversial Tweet by Elon Musk</li> 
<li>Ransomware Group Files SEC Complaint Against Breached Company</li> 
<li>Europe Opening Up Radio Encryption Standard TETRA for Public Review</li> 
<li>Apple Announcing Adoption of RCS Messaging for iPhones</li> 
<li>Steve's Progress on Dynamic Code Signing for SpinRite Releases</li> 
<li>Removing Suction Cup Barnacles from Windshields</li> 
<li>Recommendations for Benchmarking USB Drive Read/Write Speeds</li> 
<li>Concerns Over EU's Proposed eIDAS 2.0 QWACs Legislation</li> 
<li>Why Protectli Routers Are Preferred for pfSense Setups</li> 
<li>Credit Card Security Precautions for Ex-LastPass Users</li> 
<li>Origins and Evolution of Ethernet Networking Over 50 Years</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-949-Notes.pdf">https://www.grc.com/sn/SN-949-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://securemyemail.com/twit" target="_blank" rel="sponsored">securemyemail.com/twit Use Code TWIT</a></li>
</ul>

SN 949: Ethernet Turned 50 - Signal funding, X (Twitter) ad fallout, RCS for iPhone, TETRA review

<ul> 
<li>Adobe Flash Player Updater is (still) desperately trying to update</li> 
<li>Veracrypt password security</li> 
<li>Firefox moves to 120 with a bunch of very nice new features</li> 
<li>Do-Not-Track is back on track</li> 
<li>"ownCloud" -or- "PwnCloud" ?</li> 
<li>CrushFTP Critical Vulnerability</li> 
<li>Bypassing fingerprint authentication</li> 
<li>ApacheMQ</li> 
<li>TransUnion &amp; Experian both hacked</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-950-Notes.pdf">https://www.grc.com/sn/SN-950-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
</ul>

SN 950: Leo Turns 67 - Fingerprint Security, Do-Not-Track

<ul> 
<li>How masked domain owners can be unmasked through ICANN's new Registration Data Request Service (RDRS)</li> 
<li>WhatsApp's addition of Secret Code for extra privacy protection in Chat Lock</li> 
<li>Iranian hackers exploited default passwords in programmable logic controllers at US water facilities</li> 
<li>Attempt by Montana to ban TikTok statewide was stalled by a federal judge ruling</li> 
<li>Over 1 billion Android devices now have RCS messaging enabled</li> 
<li>EU Cyber Resilience Act will improve security of Internet of Things devices sold in the EU</li> 
<li>Black Basta ransomware group has netted over $107 million since early 2022</li> 
<li>Google's new .meme top-level domain allowing meme-related web properties</li> 
<li>CISA's Secure by Design initiative echoes security best practices frequently recommended on the podcast</li> 
<li>France plans to ban use of "foreign" end-to-end encrypted messaging apps like Telegram and require use of French app Olvid instead</li> 
<li>Concerns raised by industry experts Ivan Ristic and Ryan Hurst about EU's eIDAS 2.0 legislation undermining certificate authority trust</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-951-Notes.pdf">https://www.grc.com/sn/SN-951-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://canary.tools/twit" target="_blank" rel="sponsored">canary.tools/twit - use code: TWIT</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
</ul>

SN 951: Revisiting Browser Trust - ICANN RDRS, Beeper Mini, TikTok ban, .meme TLD

<ul> 
<li>The government collection of push notification metadata</li> 
<li>Facebook Messenger sets end to end encryption as the default</li> 
<li>Iran's Cyber Av3ngers</li> 
<li>Cisco's Talos Top 10 cyber security exploits this year</li> 
<li>Over 30% of apps are still using a using a vulnerable version the Log4J library</li> 
<li>Quad 9 speaks on their legal victory against Sony</li> 
<li>What are the "Clear Web", "Dark Web", and "Deep Web"?</li> 
<li>A Flaw in Telegram</li> 
<li>Xfinity Mobile wants you to accept a root CA, DO NOT</li> 
<li>Hardware VPN alternative</li> 
<li>A breakthrough in quantum computing</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-952-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-952-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
</ul>

SN 952: Quantum Computing Breakthrough - The Clear/Deep/Dark Web, Quad 9 victory, Telegram Flaw

<ul> 
<li>Child protection legislation in the US</li> 
<li>Meta pushes back on the $200 billion FTC fine for COPPA violation</li> 
<li>Age verification on the internet</li> 
<li>Google moving from 3rd party cookies to topics</li> 
<li>A look at Cloudflare's metrics</li> 
<li>SpinRite update</li> 
<li>Cox Media admits that it spys on you</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-953-Notes.pdf">https://www.grc.com/sn/SN-953-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://securemyemail.com/twit" target="_blank" rel="sponsored">securemyemail.com/twit Use Code TWIT</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
</ul>

SN 953: Active Listening - KOSA, Cloudflare's Numbers, SpinRite Update

Leo looks back at the year's top security stories of 2023.<ul> 
<li>Steve's Next Password Manager After the LastPass Hack</li> 
<li>CHESS is Safe</li> 
<li>Here Come the Fake AI-generated "News" Sites</li> 
<li>How Bad Guys Use Satellites</li> 
<li>Microsoft's "Culture of Toxic Obfuscation"</li> 
<li>Steve announces his commitment to SN</li> 
<li>Apple Says No</li> 
<li>NSA's Decade of Huawei Hacking</li> 
<li>ValiDrive announcement</li></ul> 
Host: <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.

SN 954: Best of 2023 - Security Now's Best Moments of 2023

SpinRite 6.1 update 
Pruning Root Certificates 
A solution to Schrodinger's Bowl 
DNS Benchmark and anti-virus tools 
Nebula Mesh 
SpinRite 7 is coming 
The Mystery of CVE-2023-38606 
Show Notes - <a href="https://www.grc.com/sn/SN-955-Notes.pdf">https://www.grc.com/sn/SN-955-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
</ul>

SN 955: The Mystery of CVE-2023-38606 - SpinRite Update, Nebula Mesh, Apple's Backdoor

<ul> 
<li>More on Apple's hardware backdoor</li> 
<li>Russian Hacking of Ukranian cameras</li> 
<li>Russian hackers were inside Ukraine telecoms giant for months</li> 
<li>Things are still a mess at 23andMe</li> 
<li>CoinsPaid was the victim of another cyberattack</li> 
<li>Crypto Hacking in 2023</li> 
<li>Mandiant Twitter scam</li> 
<li>Defining "cyber warfare"</li> 
<li>LastPass is making some changes</li> 
<li>Windows Watch</li> 
<li>Google settles $5 billion lawsuit</li> 
<li>Return Oriented Programming</li> 
<li>Shutting Down Edge</li> 
<li>Root Certificates</li> 
<li>Credit freezing</li> 
<li>SpinRite Update</li></ul> 
Show Notes - https://www.grc.com/sn/SN-956-Notes.pdf 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
</ul>

SN 956: The Inside Tracks - 23andME Mess, Ukraine Telecom Hack, LastPass

<ul> 
<li>What would an IoT device look like that HAD been taken over?</li> 
<li>And speaking of DDoS attacks</li> 
<li>Trouble in the Quantum Crypto world</li> 
<li>The Browser Monoculture</li> 
<li>Question about the Apple backdoor</li> 
<li>Getting into infosec</li> 
<li>proton drive vs sync</li> 
<li>SpinRite update</li> 
<li>The Protected Audience API</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-957-Notes.pdf">https://www.grc.com/sn/SN-957-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://meraki.cisco.com/twit" target="_blank" rel="sponsored">meraki.cisco.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
</ul>

SN 957: The Protected Audience API - Hacked Washing Machine, Quantum Crypto Troubles

<ul> 
<li>Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack</li> 
<li>US Health and Human Services Breached</li> 
<li>Firefox vs "The Competition"</li> 
<li>Brave reduces its anti-fingerprinting protections</li> 
<li>CISA's proactive policing results one year later</li> 
<li>Longer Life For Samsung Updates</li> 
<li>Google Incognito Mode "Misunderstanding"</li> 
<li>Show Doc Not showing images on iOS Safari</li> 
<li>Generated AI Media Authentication</li> 
<li>Which computer languages to learn?</li> 
<li>Flashlight app subscription</li> 
<li>Google's Privacy Sandbox system</li> 
<li>Malware and IoT devices</li> 
<li>Protected Audience API vs. Malvertising</li> 
<li>Defensive computing</li> 
<li>Why ISPs don't do anything about DDoS attacks</li> 
<li>SpinRite Update</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-958-Notes.pdf">https://www.grc.com/sn/SN-958-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
</ul>

SN 958: A Week of News and Listener Views - HSS Breach, CISA's Policing Results

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of SpinRite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.
Records live at https://twit.tv/live every Tuesday at 4:30pm Eastern / 1:30pm Pacific.

SN 952: Quantum Computing Breakthrough - The Clear/Deep/Dark Web, Quad 9 victory, Telegram Flaw

Security Now

Related tracks