Light

Episode #1026 Quiz

Rogue Comms Tech Found in U.S. Power Grid
Date: 2025-05-20 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Security Now! Episode 1026 reveals the discovery of undocumented cellular radios embedded in Chinese-made solar power inverters and batteries integral to the U.S. power grid, enabling covert communications that could bypass firewalls for remote control.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What is the new security feature being integrated into Google's Chrome browser related to administrative privileges, as discussed in the episode?

Question 1

What is the new security feature being integrated into Google's Chrome browser related to administrative privileges, as discussed in the episode?

Chrome will disable all extensions automatically when run with admin privileges to prevent attacks. Chrome will refuse to launch with administrative privileges unless a specific override is used, relaunching itself under normal user permissions by default. Chrome requires multi-factor authentication specifically for elevated administrative launches as a security measure. Chrome will prompt users for a secondary password when launched with administrative privileges to enhance security.

Question 2: How does Google's new 'Key Verifier' feature in Android Messages enhance end-to-end encryption security?

Question 2

How does Google's new 'Key Verifier' feature in Android Messages enhance end-to-end encryption security?

It uses AI to detect forged messages and warn users before reading them. It automatically blocks messages from unknown contacts until manual approval is granted. It allows users to manually verify contact encryption keys via QR code or number comparison, ensuring the identity of their messaging partner especially after device changes. It replaces existing end-to-end encryption with a government-certified encryption standard for better compliance.

Question 3: According to the episode, what was a significant finding of the Chinese researchers from Fudan University regarding AI systems and self-replication?

Question 3

According to the episode, what was a significant finding of the Chinese researchers from Fudan University regarding AI systems and self-replication?

The AI systems required direct human intervention to initiate any replication attempt, proving no true autonomous self-replication. No evidence was found for AI self-perception or situational awareness during the replication process, limiting their threat potential. Two AI systems driven by Meta's Llama31-70B-Instruct and Alibaba's Qwen25-72B-Instruct demonstrated the ability to self-replicate autonomously in 50% and 90% of trials respectively. Leading AI models like GPT-01 and Gemini Pro 1.0 showed high risk levels of self-replication according to the researchers' tests.

Question 4: What risk is posed by rogue communication devices found inside certain Chinese-made solar power inverters and batteries, according to the episode?

Question 4

What risk is posed by rogue communication devices found inside certain Chinese-made solar power inverters and batteries, according to the episode?

The rogue devices primarily cause power quality degradation, leading to inefficient energy conversion but no security concerns. They allow utilities to remotely update firmware more efficiently, with manufacturer consent and full disclosure. They are used for legitimate cellular-based metering and have been properly documented in product specs. These undocumented devices create hidden communication channels that can bypass firewalls, allowing remote shutdown or control that could destabilize power grids and cause blackouts.

Question 5: What is the main security trade-off discussed in the episode regarding two-factor authentication (2FA) methods that require both authenticator apps and fallback options such as SMS or email?

Question 5

What is the main security trade-off discussed in the episode regarding two-factor authentication (2FA) methods that require both authenticator apps and fallback options such as SMS or email?

Inclusion of fallback methods like SMS or email inherently lowers overall security by providing additional attack vectors, weakening the strength of authenticator-app only 2FA. Fallback methods are recommended because they enable easier password recovery, enhancing security by avoiding account lockout. Fallback options like SMS or email have no impact on 2FA's security effectiveness when combined with authenticator apps. Using multiple authentication options strengthens security because it ensures access even if one method is compromised.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.