Steve Gibson @SGgrc

I didn't want to clutter up the corporate GibsonResearch Twitter account with lots of personal stuff. That's what this one is for. grc.com Southern California Joined May 2010

Tweets

7K
Followers

60K
Following

0
Likes

352

Steve Gibson @SGgrc

2 days ago

“Covering all the bases” SN#1041 grc.com/sn/sn-1041-not… BYTE magazine's first issue exactly 50 years ago. Shaken & Stir telco enforcement. Can AI be controlled? No AI for Vivaldi. Using AI to attack. Scummy sites sue the U.K. TransUnion breached. DOD using Russian's open source.

2 6 65 3K 2

Download Image

Steve Gibson @SGgrc

a week ago

“Clickjacking Whac-A-Mole” SN#1040 grc.com/sn/sn-1040-not… Germany to outlaw ad blockers? Many AI lawsuits. Bluesky suspends service in Mississippi. An AI-throttling prompt. The rise of Linux malware. A trivial Docker escape fixed. Why clickjacking attacks are whac-a-mole games.

6 7 60 3K 3

Download Image

Steve Gibson @SGgrc

2 weeks ago

“The Sad Case of ScriptCase” SN#1039 show notes: grc.com/sn/sn-1039-not… AI summaries upsets Internet economics. Plex 0-day. Chrome improvements. NIST's crypto for IoT. SyncThing v2. Alien:Earth thoughts. Why login authentication can NEVER be relied upon to protect enterprises.

5 13 79 3K 6

Download Image

Steve Gibson @SGgrc

4 weeks ago

“Perplexity's Duplicity” CISA's Emergency Federal Directive. Nvidia says no backdoors! Dashlane ends worthless free tier. uBlock Origin for Safari! Serious Dell Latitude security problem. A venerable Sci-Fi franchise gets a new series. What to do when AI scrapers ignore rules?

2 8 82 5K 7

Download Image

Steve Gibson @SGgrc

a month ago

“Chinese Participation in MAPP” SN#1037 show notes: grc.com/sn/sn-1037-not… SharePoint follow-up. How Russia spies on embassies. Signal says NO to Australia. YouTube uses history for age estimation. New Chrome extension signing. TruAge. Should Chinese co's get early patch access?

0 7 66 3K 3

Download Image

Steve Gibson @SGgrc

a month ago

"Inside the SharePoint 0-day RCE" SN#1036 show notes: grc.com/sn/sn-1036-not… Brave browser randomizes fingerprints & will block MSFT Recall by default. Clorox sues IT contractor for $380 million damages. FIDO passkey not bypassed. Cyberwar. How MSFT badly fumbled Patch Tuesday.

2 12 114 4K 6

Download Image

Steve Gibson @SGgrc

a month ago

“Cloudflare's 1.1.1.1 Outage” SN#1035 show notes: grc.com/sn/sn-1035-not… Bypassing Passkeys. More ransomware attacks. Cloudflare blocks pirate domains. Exchange Server by subscription. China Webshells: The new buffer overflow. The age verification need. Cloudflare config error.

5 7 65 3K 2

Download Image

Steve Gibson @SGgrc

a month ago

“Introduction to Zero-Knowledge Proofs” SN#1034 show notes: grc.com/sn/sn-1034-not… Quantum factorization takedown. Notepad++ self-signing. Bobiverse book 6. Crypto ATMs. Browser fingerprinting metrics. Memory safe interpreters. Introduction to concepts of zero knowledge proofs.

2 3 49 2K 2

Download Image

Steve Gibson @SGgrc

2 months ago

“Going on the Offensive” SN#1033 show notes: grc.com/sn/sn-1033-not… More Israeli spyware. EU abandons Azure and adopts post-quantum crypto. U.S. cracking down on Bitcoin ATMs. Commercial use of free open source software. LOTs more! What's required for Offensive cyber operations?

5 9 71 3K 4

Download Image

Steve Gibson @SGgrc

2 months ago

“Pervasive Web Fingerprinting” SN#1032 show notes: grc.com/sn/sn-1032-not… No more Let's Encrypt email. Windows “Unexpected Restart Experience”. US Gov gets more serious about memory-safe languages. New Cisco 9.8 & 10.0's. PNGv3. The abuse of browser fingerprinting for tracking.

1 10 71 3K 3

Download Image

Steve Gibson @SGgrc

2 months ago

“How Salt Typhoon gets in” SN#1031 show notes: grc.com/sn/sn-1031-not… Salt Typhoon's latest victims. State healthcare portals leaking visitor's personals. Apple adopts industry std. Passkey import/export. Microsoft drops old drivers. Clarity on AI. A deep dive into Salt Typhoon.

6 6 79 4K 4

Download Image

Steve Gibson @SGgrc

3 months ago

“Internet Foreground Radiation” SN#1030 show notes: grc.com/sn/sn-1030-not… Denied iOS exploitation. The NPM registry under siege. Salt Typhoon inside Comcast and Digital Realty. XChat has your keys. Outlook file types. SpinRiteing encrypted drives. Bots are scanning & attacking!

1 7 66 3K 2

Download Image

Steve Gibson @SGgrc

3 months ago

“The Illusion of Thinking” SN#1029 show notes: grc.com/sn/sn-1029-not… Remembering Bill Atkinson. Meta apps & JavaScript collude. The EU's new DNS service. OpenAI is prevented from deleting ANYONE's chat history. Apple explores Large “Reasoning” Models true reasoning ability.

1 9 85 3K 3

Download Image

Steve Gibson @SGgrc

3 months ago

“AI Vulnerability Hunting” SN#1028 show notes: grc.com/sn/sn-1028-not… Pwn2Own 2025 results. PayPal scanning new domain registrations. iOS jailbreak author gives up. SVG contain JavaScript. Classic Sci-Fi movies. How OpenAI's o3 model discovered a critical remote Linux 0-day.

7 9 76 3K 1

Download Image

Steve Gibson @SGgrc

3 months ago

“Artificial Intelligence” SN#1027 show notes: grc.com/sn/sn-1027-not… The status of Encrypted Client Hellos (ECH). Remote inverter shutdowns. Blocking newly listed domains. The AI Hype Cycle. AI as blackmailer? Copilot covering up bugs? The unrestrained Venice.AI.

8 9 80 3K 5

Download Image

Steve Gibson @SGgrc

4 months ago

“Rogue Comms Tech Found in US Power Grid” SN#1026 show notes: grc.com/sn/sn-1026-not… Chrome refuses Admin. Android Messenger key verification. Pwn2Own for AI. AI can replicate today. Office on old Win10. 23andMe purchased. Andor season 2. Radios discovered inside US power grid.

3 6 76 3K 3

Download Image

Steve Gibson @SGgrc

4 months ago

“Secure Conversation Records Retention” SN#1025 show notes: grc.com/sn/sn-1025-not… More attempts at age restriction. Long-lived python repository malware. FBI says discard old routers. Reverse engineering WhatsApp. Malicious AI usage. How to securely archive E2EE message history

1 4 48 3K 2

Download Image

Steve Gibson @SGgrc

4 months ago

“Don't Blame Signal” SN#1024 show notes: grc.com/sn/sn-1024-not… MSFT abandons passwords, allows their deletion. Meta's RayBan glasses privacy changes. 30% of MSFT code now by AI. Chrome's security without Google. eCommerce backdoors spring to life. A bad insecure Signal clone.

3 2 68 3K 2

Download Image

Steve Gibson @SGgrc

4 months ago

“Preventing Windows Sandbox Abuse” SN#1023 show notes: grc.com/sn/sn-1023-not… The "inetpub" directory mess & mystery -- and its abuse. Fake North Korean companies. More ways to confuse AI. Critical data loss in unpowered SSDs. Feedback and malware is hiding in Windows Sandbox!

4 9 55 3K 2

Download Image

Steve Gibson @SGgrc

5 months ago

“Windows Sandbox” SN#1022 show notes: grc.com/sn/sn-1022-not… Firefox tab grouping. Recall's re-rollout. CVE nearly died. China confesses hacking the US. A 9.8 Python package problem again. Here come very short TLS certs. A crosswalk hack. The amazing built-in Windows Sandbox!