Security Now

We told you so! (1x941)

Air date: Sep 26, 2023

Apple has quietly removed support for Postscript in macOS Ventura. China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009. A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed. The Signal messaging platform has added a post-quantum encryption protocol. A zero-day iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy. Steve gave an update on the status of his forthcoming ValiDrive USB validation utility. A blog post about the complexity of modern web browsers. An emailer claimed to have a mathematical algorithm that can generate truly random numbers. An emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data. There was an explanation of how public key encryption can be used bidirectionally. Listener questions whether all stolen LastPass vaults will eventually be decrypted.