# SN 1041: Covering All the Bases

**URL:** <https://www.twit.community/t/sn-1041-covering-all-the-bases/18995>\
**Category:** Security Now\
**Tags:** episode\
**Created:** [September 3, 2025, 3:16am UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995 "2025-09-03T03:16:45Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Leo](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/leo/32/16203_2.png) [@Leo](https://www.twit.community/u/Leo)\
**Post date:** [September 3, 2025, 3:16am UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/1 "2025-09-03T03:16:45Z")

</div>

Beep boop - this is a robot. A new show has been posted to TWiT…

> **[Covering All the Bases | TWiT.TV](https://twit.tv/shows/security-now/episodes/1041)**
>
> When even the Department of Defense can't properly vet its software dependencies, what chance do the rest of us have? Steve Gibson reveals how 'fast-glob' became a case study

What are your thoughts about today’s show? We’d love to hear from you!

---

<div class="post-metadata">

**Author:** ![CTech](https://avatars.discourse-cdn.com/v4/letter/c/71e660/32.png) [@CTech](https://www.twit.community/u/CTech)\
**Post date:** [September 4, 2025, 5:56pm UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/2 "2025-09-04T17:56:26Z")

</div>

I stopped using Google Search Long ago.

There are good alternatives out there.

Have been using Startpage as my default for a while now. You can go in & change the settings then save the url as a bookmark & it will retain your settings without using Cookies.

I use UBlock Origin so I get no sponsored Links.

I also use DuckDuckGo Lite.

I do not want AI so I just disable it.

There is 1 Ai Search Engine that I have started to test out & it is the only one I would use.

Lumo by Proton.

> **[Lumo: Privacy-first AI assistant where chats stay confidential](https://lumo.proton.me/guest)**
>
> Meet Lumo, the zero-access encrypted AI assistant by Proton that does not track or record your conversations. Ask me anything — it's confidential

---

<div class="post-metadata">

**Author:** ![DBSync](https://avatars.discourse-cdn.com/v4/letter/d/c0e974/32.png) [@DBSync](https://www.twit.community/u/DBSync)\
**Post date:** [September 4, 2025, 7:38pm UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/3 "2025-09-04T19:38:18Z")

</div>

Steve, just so you know that DOD does have vetted software. Just remember they vet specific versions and new versions go through a process to check the software.

---

<div class="post-metadata">

**Author:** ![PHolder](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/pholder/32/2439_2.png) [@PHolder](https://www.twit.community/u/PHolder)\
**Post date:** [September 5, 2025, 6:45am UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/4 "2025-09-05T06:45:10Z")

</div>

> [@DBSync](#):
>
> Steve

Just so you know @DBSync that Steve doesn’t check in here. If you want to make sure he knows your thoughts, use his email system. You don’t have to subscribe to anything if you don’t want to, but going through the process will allow you to send email to Steve. [GRC&nbsp;|&nbsp;Electronic Mail System&nbsp;&nbsp;&nbsp;&nbsp;](https://www.grc.com/mail.htm)

---

<div class="post-metadata">

**Author:** ![DBSync](https://avatars.discourse-cdn.com/v4/letter/d/c0e974/32.png) [@DBSync](https://www.twit.community/u/DBSync)\
**Post date:** [September 5, 2025, 3:07pm UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/5 "2025-09-05T15:07:28Z")

</div>

I know. I was getting to it. I already am on his email list.

---

<div class="post-metadata">

**Author:** ![maguswine](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/maguswine/32/10091_2.png) [@maguswine](https://www.twit.community/u/maguswine)\
**Post date:** [September 6, 2025, 2:22pm UTC](https://www.twit.community/t/sn-1041-covering-all-the-bases/18995/6 "2025-09-06T14:22:49Z")

</div>

I am still uncertain about my stance on the age verification issue. We might just adopt the view that if children lie about their age on porn sites, it’s their own responsibility. However, the problem with that approach is that children don’t fully grasp the consequences of their actions, which is why we impose age restrictions on alcohol, cigarettes, sex, and marriage. Another concern is that the emotional consequences won’t only affect the individual.

The common ground seems to be that there are no easy solutions here. If you recognise this as an issue, doing nothing isn’t an option. One idea I like is using our ID on our phones to verify our age. The only other solution, as I see it, is to say “This hill is too steep for me, so I’m not even going to attempt it” which seems a but defeatest.

And, in terms of AI stealing all of your bandwidth, wouldn’t Cloudflare help with this? If you’re protecting your site with clouflare, and it proxies your site, your server isn’t regenerating your website on the fly
