Light

Episode #921 Quiz

OSB OMG and Other News!
Date: 2023-05-02 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

The episode examines the UK Online Safety Bill’s clash with end-to-end encryption and age verification: Signal and WhatsApp threaten withdrawal rather than weaken privacy, while Wikipedia warns mandated age checks would require major technical overhaul and data collection.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the amplification factor of the newly described UDP reflection attack that abused Service Location Protocol (SLP)?

Question 1

According to the episode, what was the amplification factor of the newly described UDP reflection attack that abused Service Location Protocol (SLP)?

About 700 to 1 About 2200 to 1 About 220 to 1 About 22 to 1

Question 2: What new behavior did Google Authenticator gain in the episode, and what security caveat did Leo raise about it?

Question 2

What new behavior did Google Authenticator gain in the episode, and what security caveat did Leo raise about it?

Cloud backup of OTP seeds, but without end-to-end encryption Automatic device transfer of OTP seeds, but only after biometric reauthentication Hardware-token export of OTP seeds, but only into encrypted local files Cross-platform OTP sharing, but only after manual approval by each website

Question 3: Why did Steve argue that consumer routers should be set to self-update by default?

Question 3

Why did Steve argue that consumer routers should be set to self-update by default?

Because update downloads were too small to matter on modern broadband links Because router vendors were already shipping forced updates that often bricked devices Because patch gaps let attackers reverse engineer public firmware fixes and immediately exploit unupdated routers Because consumer routers were no longer exposed to the public Internet by design

Question 4: What did Steve suggest should be displayed on any encrypted app forced to do state-mandated monitoring in the UK?

Question 4

What did Steve suggest should be displayed on any encrypted app forced to do state-mandated monitoring in the UK?

A gray badge stating that the app complies with the Online Safety Bill A yellow warning stating that content moderation is under review by Ofcom A red banner stating that the communication is being monitored by the government A blue notice stating that age verification may be required for some content

Question 5: What was the key pre-release security step Intel took with TDX before public release, according to the episode?

Question 5

What was the key pre-release security step Intel took with TDX before public release, according to the episode?

It shipped TDX first and then invited public bug reports after deployment It ran TDX through Project Circuit Breaker and a Google/Project Zero review before release It validated TDX only with automated fuzzing and no human analysis It limited review to internal compiler testing and skipped outside auditors

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.