Light

Episode #910 Quiz

Ascon
Date: 2023-02-14 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

NIST standardized Ascon, a lightweight authenticated-encryption and hashing family for constrained devices needing efficient 128-bit security, short-message performance, small RAM and ROM, and side-channel resistance. It uses a simple permutation, AEAD, hashing, KMAC, PRF, PBKDF, and PRNG modes, avoiding table lookups and padding while supporting online nonce-based operation.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what change in the ESXiArgs ransomware made CISA's recovery script useless for newly hit systems?

Question 1

According to the episode, what change in the ESXiArgs ransomware made CISA's recovery script useless for newly hit systems?

It switched from encrypting configuration files to overwriting ESXi logs It started deleting the OpenSLP service before encryption began It began encrypting the main .VMDK virtual machine image file It changed its payload to only encrypt backup snapshots stored off-host

Question 2: What did the Check Point report say attackers were using to bypass ChatGPT's web UI restrictions on malicious content creation?

Question 2

What did the Check Point report say attackers were using to bypass ChatGPT's web UI restrictions on malicious content creation?

Telegram bots connected to OpenAI's API A browser extension that rewrote blocked prompts into approved ones A hidden admin mode inside the ChatGPT web interface A local offline model trained from leaked OpenAI weights

Question 3: What was Brave's stated strategy in its new 'HTTPS by Default' feature starting in version 1.5?

Question 3

What was Brave's stated strategy in its new 'HTTPS by Default' feature starting in version 1.5?

Upgrade HTTP navigations to HTTPS unless a site is on a break list or fails over HTTPS Upgrade only sites already on the HTTPS Everywhere list to HTTPS Redirect all sites to HTTPS and ignore any server-side errors Leave HTTP untouched unless the user manually enables secure-only mode

Question 4: What default security change did Amazon announce for newly created S3 buckets starting in April 2023?

Question 4

What default security change did Amazon announce for newly created S3 buckets starting in April 2023?

Enable Block Public Access and disable access control lists Force all buckets to be private with no ability to override Require server-side encryption and disable all bucket policies Replace S3 object ownership with mandatory cross-account sharing

Question 5: Why did NIST choose Ascon for lightweight cryptography, according to the episode?

Question 5

Why did NIST choose Ascon for lightweight cryptography, according to the episode?

It is a 256-bit block cipher optimized for desktop servers and bulk storage It provides 128-bit AEAD and hashing for constrained devices with strong side-channel resistance It was selected because it trades side-channel resistance for faster padding rules It is mainly a public-key system for replacing RSA on smart cards

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.