Light

Episode #816 Quiz

The Mystery of AS8003
Date: 2021-04-27 | Length: 2 hrs | Episode page at twit.tv

About this episode

This episode covered Patch Tuesday, including 114 Microsoft fixes and four Exchange RCEs reportedly found by the NSA, two unauthenticated at CVSS 9.8, plus an exploited Win32k privilege escalation. Google Project Zero added a 30-day post-patch disclosure grace period.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What specific deadline change did Google Project Zero announce for cases where a vulnerability is fixed before its original disclosure deadline expires?

Question 1

What specific deadline change did Google Project Zero announce for cases where a vulnerability is fixed before its original disclosure deadline expires?

It requires immediate public disclosure once a patch is released It adds a 30-day grace period after the original deadline It replaces the original deadline with a fixed seven-day grace period It extends the original deadline by 90 additional days

Question 2: According to the episode, what is the startup Thistle initially focusing on building for connected devices?

Question 2

According to the episode, what is the startup Thistle initially focusing on building for connected devices?

A firmware scanner that blocks devices from joining networks A chipset that encrypts all IoT telemetry by default A cloud service that brokers device identity for smart homes A platform that delivers security updates to connected devices

Question 3: What was the core Linux kernel project complaint about the University of Minnesota research team’s patches, as described in the episode?

Question 3

What was the core Linux kernel project complaint about the University of Minnesota research team’s patches, as described in the episode?

They attempted to merge changes through a private vendor branch They submitted patches in bad faith to test the review process They leaked kernel source code to the public before review They refused to disclose the vulnerability class in their paper

Question 4: How many IPv4 addresses were being announced by AS8003 by mid-April, according to Doug Madory’s report quoted in the episode?

Question 4

How many IPv4 addresses were being announced by AS8003 by mid-April, according to Doug Madory’s report quoted in the episode?

56 million unique IPv4 addresses 175 million unique IPv4 addresses 100 million unique IPv4 addresses 256 million unique IPv4 addresses

Question 5: What explanation did the Department of Defense provide for the AS8003 BGP announcements?

Question 5

What explanation did the Department of Defense provide for the AS8003 BGP announcements?

A permanent transfer of unused DoD IPv4 space to a private contractor A commercial lease of surplus addresses to finance cyber operations A pilot effort to advertise DoD IP space and assess unauthorized use An emergency rerouting of military traffic away from a BGP hijack

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.