• Apple has quietly removed support for Postscript in macOS Ventura over security concerns with the outdated interpreter language.
• China has formally accused the NSA of hacking and maintaining access to Huawei servers since 2009, based on documents from Edward Snowden.
• A misconfigured Azure Shared Access Signature token resulted in 38TB of sensitive internal Microsoft data being exposed, including employee backups with passwords.
• The Signal messaging platform has added a postquantum encryption protocol called PQXDH, combining its existing X3DH with the believed quantumresistant CRYSTALSKyber system.
• A zeroday iOS exploit chain was used to target Egyptian presidential candidate Ahmed Eltantawy, redirecting his traffic to install spyware after visiting a nonHTTPS site.
• Steve gave an update on the status of his forthcoming ValiDrive USB validation utility, explaining delays due to challenges working at the USB level under Windows.
• A blog post argued that the complexity of modern web browsers has made it impossible to create competitive new browsers from scratch.
• An emailer claimed to have a mathematical algorithm that can generate truly random numbers.
• Another emailer asked whether encrypting and deleting a hard drive could substitute for overwriting with random data.
• There was an explanation of how public key encryption can be used bidirectionally for both encryption and authentication.
• Listener questions whether all stolen LastPass vaults will eventually be decrypted.

Show Notes https://www.grc.com/sn/SN941Notes.pdf

Hosts: Steve Gibson and Ant Pruitt
Security Now episode 941
More Info: https://twit.tv/shows/securitynow'>https://twit.tv/shows/securitynow/ep...

Sponsors:
• joindeleteme.com/twit promo code TWIT
• GO.ACILEARNING.COM/TWIT
• Melissa.com/twit

Download or subscribe to this show at https://twit.tv/shows/securitynow'>https://twit.tv/shows/securitynow

Get episodes adfree with Club TWiT at https://twit.tv/clubtwit'>https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: https://grc.com/ also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Products we recommend: https://www.amazon.com/shop/twitnetca...
TWiT may earn commissions on certain products.

Join our TWiT Community on Discourse: https://www.twit.community/

Follow us:
https://twit.tv/
  / twit  
  / twitnetwork  
  / twit.tv  

About us:
TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce over 30 hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, This Week in Google, Windows Weekly, Security Now, All About Android, and more.