Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! episode #1048, what key change did the NIST 800-63B guidelines introduce regarding password complexity and management?

Advocate for password hints and security questions as secure recovery methods. Require multifactor authentication without regard to password length or complexity. Mandate complex passwords with special characters and require resets every 30 days. Focus on password length over complexity, eliminating the requirement for special characters and regular resets.

Question 2

What is the legal rationale cited by the U.S. Supreme Court for requiring age verification for adult content access under Texas laws as discussed in episode #1048?

The First Amendment does not protect adults from having to prove their age to access certain content, and age verification serves to protect minors without infringing free speech. Only in-person age verification is constitutional; online methods are currently illegal. Age verification is unconstitutional and has been blocked for all types of content. Adults have a constitutional right to avoid age verification, so age checks can only be applied to minors.

Question 3

What major security gap did researchers discover about geosynchronous satellite traffic, as reported in the episode?

Approximately 50% of geosynchronous satellite traffic is transmitted unencrypted, exposing sensitive infrastructure and user data. All satellite TV broadcast traffic is encrypted, but internet traffic over satellites is fully protected with link-layer encryption. Only military and government satellite communications were found to be unencrypted according to the research. Satellite communications utilize end-to-end encryption but lack adequate physical tamper resistance at the dish level.

Question 4

Regarding the newly reported Mic-E-Mouse attack, what enables a standard optical mouse to function as a side-channel microphone?

Listening to the clicking sounds of the mouse buttons being pressed by the user during conversation. Detection of subtle surface vibrations caused by audio signals via the mouse's high-resolution optical sensor and advanced signal processing. Utilizing electromagnetic interference from computer components captured by the mouse's circuitry. Built-in microphone hardware inside modern gaming mice capturing ambient audio directly.

Question 5

What capability of modern web browsers contributes to the feasibility of the Mic-E-Mouse attack as explained in this episode?

Browsers have direct APIs to control the mouse sensor hardware and record audio from peripherals. Browsers require high privilege access to capture detailed mouse sensor data for audio reconstruction. Browsers can execute WebAssembly code that accesses high-rate mouse movement data sufficient to capture vibrations without explicit system permissions. Browsers block all mouse movement data from being accessed by websites to prevent side-channel attacks like Mic-E-Mouse.

Cancel

Episode #1048 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5