Light

Episode #886 Quiz

Wacky Data Exfiltration
Date: 2022-08-30 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Ben-Gurion researchers showed air-gapped data exfiltration via NIC LEDs and ultrasonic speaker-to-gyroscope channels. Malware can blink status LEDs through firmware, driver, link-speed, or interface control, yielding up to 100 bps. Resonant ultrasonic tones can perturb smartphone MEMS gyroscopes, covertly transferring 8 bps over eight meters.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the LastPass discussion, what was Steve Gibson's main rationale for not recommending an immediate password-manager switch based only on the breach disclosure?

Question 1

In the LastPass discussion, what was Steve Gibson's main rationale for not recommending an immediate password-manager switch based only on the breach disclosure?

The incident had already been proven to be a harmless internal audit. Changing the master password would have re-encrypted data on LastPass servers automatically. The compromise had not been shown to affect encrypted customer vaults. The leaked developer account could directly decrypt user vaults in the cloud.

Question 2: What specific access path did Mikhail Matveev say led to the fastest attack he described in the interview?

Question 2

What specific access path did Mikhail Matveev say led to the fastest attack he described in the interview?

A Fortinet VPN exploit that he had not yet weaponized. A ProxyLogon vulnerability combined with a grant programmer finishing the exploit. A stolen admin token from a compromised browser session. A reused password recovered from an offline backup archive.

Question 3: According to the episode's summary of DuckDuckGo Email Protection, which feature was described as part of the service's privacy model?

Question 3

According to the episode's summary of DuckDuckGo Email Protection, which feature was described as part of the service's privacy model?

It provides disposable private addresses that can later be deactivated. It stores all forwarded mail indefinitely for account recovery. It requires a paid subscription before email forwarding is enabled. It preserves tracking pixels so senders can verify delivery.

Question 4: For the ETHERLED covert channel, what bit rate did the researchers report for the NIC LED method using driver/firmware control?

Question 4

For the ETHERLED covert channel, what bit rate did the researchers report for the NIC LED method using driver/firmware control?

100 bits per second 1 bit per second 2 bits per second 8 bits per second

Question 5: What did Steve say about the practical state of the Hikvision vulnerability CVE-2021-36260 one year after the fix was published?

Question 5

What did Steve say about the practical state of the Hikvision vulnerability CVE-2021-36260 one year after the fix was published?

Roughly 8,000 Internet-facing cameras were still vulnerable. Only internal lab devices were still exposed to the flaw. Roughly 80,000 Internet-facing cameras were still vulnerable. The flaw had been eliminated from all public-facing devices.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.