Light

Episode #883 Quiz

The Maker's Schedule
Date: 2022-08-09 | Length: 1.5 hrs | Episode page at twit.tv

About this episode

NIST’s post-quantum SIKE candidate was broken by KU Leuven researchers using a pure mathematical key-recovery attack based on the 1997 glue-and-split theorem against SIDH elliptic curves. Separately, VirusTotal found 87% of signed malware had valid signatures, and Microsoft fixed Windows 11 VAES-related AES-XTS/GCM data corruption by altering SymCrypt code paths.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: Why did the KU Leuven researchers’ break of SIKE matter beyond simply removing one candidate from consideration?

Question 1

Why did the KU Leuven researchers’ break of SIKE matter beyond simply removing one candidate from consideration?

It showed that quantum computers had already become powerful enough to factor SIKE keys directly. It showed a classical math attack could defeat a fourth-round NIST candidate that was still expected to be deployable. It showed a code-execution flaw in a finalized NIST standard that had already been widely deployed. It showed that all lattice-based post-quantum schemes had been broken by the same attack approach.

Question 2: What did VirusTotal report about malicious samples that were signed when uploaded since January 2021?

Question 2

What did VirusTotal report about malicious samples that were signed when uploaded since January 2021?

About 10% of them used spoofed icons from popular desktop applications. About 101 domains were responsible for all such signed samples. About 87% of them contained a valid signature. About 58% of them came from Sectigo-issued certificates.

Question 3: Which encryption scenarios were affected by the Windows 11 VAES-related data damage issue described in the episode?

Question 3

Which encryption scenarios were affected by the Windows 11 VAES-related data damage issue described in the episode?

RSA key exchange and ChaCha20 on all Windows 10 systems. BitLocker metadata and NTFS compression on unsupported legacy processors. AES-XTS and AES-GCM on supported Windows 11 and Server 2022 systems. TLS certificates and disk journaling on machines without AVX support.

Question 4: What did Steve say about how the three-dumb-routers solution isolates two networks?

Question 4

What did Steve say about how the three-dumb-routers solution isolates two networks?

Each LAN must share a bridge so DHCP can pass cleanly between both sides. Each LAN needs static routes on both routers to permit bidirectional access. Each LAN is protected by its own NAT router acting as a one-way valve. Each LAN relies on VLAN tags to keep traffic separate inside one switch.

Question 5: What was Paul Graham’s practical workaround for supporting founders on a maker’s schedule at Y Combinator?

Question 5

What was Paul Graham’s practical workaround for supporting founders on a maker’s schedule at Y Combinator?

He moved all founders to a manager’s schedule so everyone could share the same calendar model. He avoided meetings entirely by delegating founder contact to junior investors. He set aside end-of-day office hours so meetings would compress the day but not interrupt it. He scheduled all meetings at the start of the day so makers could get them over with first.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.