CISA's "Secure by Design" Initiative, Fastly's BoringSSL

<ul> 
<li>CISA's "Secure by Design" Initiative</li> 
<li>The GNU C Library Flaw</li> 
<li>Fastly CDN switches from OpenSSL to BoringSSL</li> 
<li>Roskomnadzor asserts itself</li> 
<li>Google updates Android's Password Manager</li> 
<li>Firefox gets post-quantum crypto</li> 
<li>Get your TOTP tokens from LastPass</li> 
<li>Inflated iOS app data</li> 
<li>LearnDMARC</li> 
<li>Sync mobile app bug</li> 
<li>SpinRite and Windows Defender</li> 
<li>Crypto signing camera</li> 
<li>Analog hole in digital camera authentication</li> 
<li>iOS and Google's Topics</li> 
<li>The gathering of the Stephvens</li> 
<li>Programmable Logic Controllers</li> 
<li>SpinRite update</li> 
<li>Malware-infected Toothbrush</li> 
<li>The Unforeseen Consequences of Google's 3rd-party Cookie Cutoff</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-960-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-960-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://Melissa.com/twit" target="_blank">Melissa.com/twit</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank">GO.ACILEARNING.COM/TWIT</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank">vanta.com/SECURITYNOW</a></li>
</ul>

SN 960: Unforeseen Consequences - CISA's "Secure by Design" Initiative, Fastly's BoringSSL