Light

Episode #1048 Quiz

Mic-E-Mouse
Date: 2025-10-21 | Length: 2.5 hrs | Episode page at twit.tv

About this episode

Security Now! episode 1048 discusses Texas SB2420's age verification law impacting app stores, challenged for broad censorship and privacy risks, with major platforms preparing APIs for compliance. NIST finally modernizes password policies emphasizing length over complexity, forbidding frequent resets and weak recovery methods.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the Security Now! episode #1048, what key change did the NIST 800-63B guidelines introduce regarding password complexity and management?

Question 1

According to the Security Now! episode #1048, what key change did the NIST 800-63B guidelines introduce regarding password complexity and management?

Require multifactor authentication without regard to password length or complexity. Focus on password length over complexity, eliminating the requirement for special characters and regular resets. Mandate complex passwords with special characters and require resets every 30 days. Advocate for password hints and security questions as secure recovery methods.

Question 2: What is the legal rationale cited by the U.S. Supreme Court for requiring age verification for adult content access under Texas laws as discussed in episode #1048?

Question 2

What is the legal rationale cited by the U.S. Supreme Court for requiring age verification for adult content access under Texas laws as discussed in episode #1048?

Adults have a constitutional right to avoid age verification, so age checks can only be applied to minors. Only in-person age verification is constitutional; online methods are currently illegal. The First Amendment does not protect adults from having to prove their age to access certain content, and age verification serves to protect minors without infringing free speech. Age verification is unconstitutional and has been blocked for all types of content.

Question 3: What major security gap did researchers discover about geosynchronous satellite traffic, as reported in the episode?

Question 3

What major security gap did researchers discover about geosynchronous satellite traffic, as reported in the episode?

Only military and government satellite communications were found to be unencrypted according to the research. Satellite communications utilize end-to-end encryption but lack adequate physical tamper resistance at the dish level. All satellite TV broadcast traffic is encrypted, but internet traffic over satellites is fully protected with link-layer encryption. Approximately 50% of geosynchronous satellite traffic is transmitted unencrypted, exposing sensitive infrastructure and user data.

Question 4: Regarding the newly reported Mic-E-Mouse attack, what enables a standard optical mouse to function as a side-channel microphone?

Question 4

Regarding the newly reported Mic-E-Mouse attack, what enables a standard optical mouse to function as a side-channel microphone?

Listening to the clicking sounds of the mouse buttons being pressed by the user during conversation. Utilizing electromagnetic interference from computer components captured by the mouse's circuitry. Built-in microphone hardware inside modern gaming mice capturing ambient audio directly. Detection of subtle surface vibrations caused by audio signals via the mouse's high-resolution optical sensor and advanced signal processing.

Question 5: What capability of modern web browsers contributes to the feasibility of the Mic-E-Mouse attack as explained in this episode?

Question 5

What capability of modern web browsers contributes to the feasibility of the Mic-E-Mouse attack as explained in this episode?

Browsers have direct APIs to control the mouse sensor hardware and record audio from peripherals. Browsers can execute WebAssembly code that accesses high-rate mouse movement data sufficient to capture vibrations without explicit system permissions. Browsers block all mouse movement data from being accessed by websites to prevent side-channel attacks like Mic-E-Mouse. Browsers require high privilege access to capture detailed mouse sensor data for audio reconstruction.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.