Light

Episode #1034 Quiz

Introduction to Zero-Knowledge Proofs
Date: 2025-07-15 | Length: 2.5 hrs | Episode page at twit.tv

About this episode

Security Now! episode 1034 critically debunks quantum factoring claims, revealing that quantum "factorizations" rely on contrived numbers and prior classical computation rather than actual quantum advantage. Notepad++ now self-signs a root CA certificate due to code-signing difficulties, raising security concerns.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What primary critique does Peter Gutmann's paper level against recent quantum factorization records?

Question 1

What primary critique does Peter Gutmann's paper level against recent quantum factorization records?

They rely on sleight-of-hand numbers and prior computational work, not genuine quantum factorization. They have never tried factoring the number 15, which was the first quantum factorization challenge. They use too many qubits, making practical quantum factorization impossible with current hardware. They have all been performed by dogs, abacuses, or old home computers rather than real quantum devices.

Question 2: Why did the Notepad++ developer decide to sign releases with a self-signed root CA certificate?

Question 2

Why did the Notepad++ developer decide to sign releases with a self-signed root CA certificate?

Because self-signed certificates are necessary to avoid triggering malware detection heuristics. Because self-signed certificates are universally trusted by all antivirus programs and Windows systems. Because acquiring traditional CA code-signing certificates has been prohibitively expensive and difficult for the open-source project. Because code-signing certificates from commercial CAs expire in one month, requiring frequent renewal.

Question 3: What is the principal security concern that arises from installing the Notepad++ self-signed root certificate on a user's machine?

Question 3

What is the principal security concern that arises from installing the Notepad++ self-signed root certificate on a user's machine?

It exposes the user's private keys to attackers because the certificate is self-signed. It will automatically disable Windows Defender and other antivirus solutions on the user's device. It forms a dangerous precedent of installing powerful trust anchors from arbitrary sources, leading to unmanageable root CA stores. It allows malware authors to remotely execute code on the user's machine without user interaction.

Question 4: In the EFF's Cover Your Tracks browser fingerprinting test, why does having a rare screen resolution significantly increase your browser's identifiability?

Question 4

In the EFF's Cover Your Tracks browser fingerprinting test, why does having a rare screen resolution significantly increase your browser's identifiability?

Because uncommon screen resolutions greatly reduce the anonymity set size, making your fingerprint unique among many browsers. Because rare screen resolutions disable browser privacy protections by default. Because most websites block users with uncommon screen resolutions due to compatibility issues. Because the screen resolution can be used to inject malicious JavaScript specific to the display.

Question 5: Which key property distinguishes zero-knowledge proofs from knowledge-based proofs as explained in the episode?

Question 5

Which key property distinguishes zero-knowledge proofs from knowledge-based proofs as explained in the episode?

The verifier learns only that the assertion is true, without gaining any other information about the assertion itself. The verifier can subsequently prove the assertion to any third party easily using the proof. Zero-knowledge proofs only apply to quantum computing protocols and are not used in classical cryptography. The prover reveals all underlying information proving the assertion to the verifier.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.