SN 1010: DNS over TLS - Record DDoS, Hackers Get Hacked


Jan 28 2025 160 mins   167

  • eM Client CAN be purchased outright.

  • An astonishing 5-year-old typo in MasterCard's DNS.

  • An unwelcome surprise received by 18,459 low-level hackers.

  • DDoS attacks continue growing, seemingly without any end in sight.

  • Let's Encrypt clarifies their plans for 6-day "we barely knew you" certificates.

  • SpinRite uncovers a bad brand new 8TB drive.

  • Listener feedback about TOTP, Syncthing and UDP hole punching, email spam, ValiDrive speed, AI neural nets, DJI geofencing, and advertising in the "New" Outlook.

  • A look into the tradeoffs required to obtain privacy for our DNS lookups

Show Notes - https://www.grc.com/sn/SN-1010-Notes.pdf


Hosts: Steve Gibson and Leo Laporte


Download or subscribe to Security Now at https://twit.tv/shows/security-now.


You can submit a question to Security Now at the GRC Feedback Page.


For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.


Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit


Sponsors: