New Episode of Security Now: Security Now 1035
In this episode of Security Now, Steve Gibson and Leo Laporte tackle several crucial topics related to cybersecurity and emerging technologies. The episode begins with a discussion on a security flaw concerning passkeys, a modern authentication mechanism. Steve explains how attackers can bypass passkey protections using a man-in-the-middle (MITM) attack to intercept the QR codes used in the cross-device authentication process. This vulnerability, although known, underscores the importance of strengthening authentication mechanisms to avoid such attacks.
Another important point discussed is Cloudflare's decision to block access to certain piracy sites in the UK in response to a legal injunction. This decision marks a significant change in Cloudflare's policy, which had previously resisted such requests in the name of network neutrality. Steve and Leo discuss the implications of this decision, including the possibility that other service providers might follow suit, leading to broader internet censorship.
The episode also addresses the issue of online age verification, a topic becoming increasingly urgent as regulations tighten. Steve proposes a solution based on biometric devices to link a user's age to a specific device, allowing for secure and privacy-respecting verification. He suggests that companies like Apple and Google could play a key role in implementing this technology.
Russia is also discussed, with new laws criminalizing the search for controversial content online. This measure, justified by the context of the war, raises concerns about freedom of expression and online censorship. Meanwhile, China is strengthening controls on Android devices by inspecting the locked phones of travelers, posing additional challenges for privacy protection.
Steve and Leo also discuss web shells, malicious tools used to remotely access compromised systems. They highlight that these web shells have become a major threat, often exploited through vulnerabilities in web configuration panels. They emphasize the importance of securing these interfaces to prevent such attacks.
The episode concludes with a detailed analysis of the global outage of Cloudflare's DNS service 1.1.1.1, which occurred during the recording of the previous episode. Steve explains the technical causes of this outage, including an internal configuration error that led to the removal of 1.1.1.1 IP addresses from global routers. He discusses the measures taken by Cloudflare to prevent such outages in the future and emphasizes the importance of redundancy in DNS service configurations.
In conclusion, this episode of Security Now provides a comprehensive overview of current cybersecurity challenges, from passkey vulnerabilities to the implications of Cloudflare's site blocking, online age verification challenges, and censorship measures in Russia and China. Steve and Leo provide valuable insights and practical solutions for navigating this complex and ever-evolving landscape.