Light

Episode #1044 Quiz

The EU's Online Age Verification
Date: 2025-09-23 | Length: 2.75 hrs | Episode page at twit.tv

About this episode

This episode covers the EU’s approach to online age verification using W3C Verifiable Credentials, which allow users to prove age without revealing personal data, ensuring privacy and GDPR compliance.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what is the primary architectural approach Spain is using for its online age verification system to protect user privacy?

Question 1

According to the episode, what is the primary architectural approach Spain is using for its online age verification system to protect user privacy?

Using biometric authentication exclusively with fingerprint matching to confirm the user's age Self-declaration combined with IP-based geolocation filtering to guess user age Requiring direct submission of national ID images to websites for manual verification by providers Employing the W3C Verifiable Credentials with OpenID4VP to assert age without disclosing personal identity information

Question 2: What is a key technical limitation of Google's mitigation efforts against Rowhammer attacks on DDR5 DRAM noted in the episode?

Question 2

What is a key technical limitation of Google's mitigation efforts against Rowhammer attacks on DDR5 DRAM noted in the episode?

Rowhammer vulnerabilities only exist in DDR4 and have been fully solved in DDR5 by standard industry methods ECC was designed specifically as a security measure against malicious memory attacks Mitigations like TRR and ECC rely on probabilistic counters with insufficient entropy, making them bypassable with crafted access patterns Google's mitigations completely eliminate all Rowhammer bit flips through hardware encryption at the memory controller

Question 3: How does the episode characterize the impact of Microsoft’s hardware requirements for Windows 11 on Windows 10 users?

Question 3

How does the episode characterize the impact of Microsoft’s hardware requirements for Windows 11 on Windows 10 users?

It allowed Windows 10 security updates indefinitely, making the transition to Windows 11 unnecessary It ensured all Windows 10 users immediately received Windows 11 upgrades without any hardware compatibility issues It was primarily a marketing strategy with no actual hardware restrictions impacting Windows 10 users It stranded hundreds of millions of Windows 10 users on unsupported hardware, compromising their security and forcing undesirable upgrade paths

Question 4: What was the nature of the critical Microsoft Entra ID vulnerability described in the episode?

Question 4

What was the nature of the critical Microsoft Entra ID vulnerability described in the episode?

A password brute force flaw that allowed attackers to guess passwords at high speed without account lockout A legacy token validation flaw allowing cross-tenant authentication as any user, including Global Admins, without proper authorization A denial of service vulnerability causing Entra ID services to crash under load A vulnerability allowing remote code execution on the Entra ID servers via malformed input

Question 5: What is the role of biometrics in Spain’s online age verification app as explained in the episode?

Question 5

What is the role of biometrics in Spain’s online age verification app as explained in the episode?

Biometrics are mandatory and the sole method for proving age in the app Biometric data is sent to websites directly during age verification to confirm identity Biometrics are an optional convenience for user authentication, but age verification principally relies on signed credentials The app uses biometrics to link the credential to the physical ID card without user input

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.