Light

Episode #922 Quiz

Detecting Unwanted Location Trackers
Date: 2023-05-09 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Google’s Passkeys shift authentication from shared passwords to public-key challenges, but device-bound keys limit portability and shared-computer use. TP-Link routers may auto-update by default. Chrome will replace the lock icon with a settings/tune icon. Apple’s Rapid Security Response enables smaller security patches. Apple and Google propose tracker-detection standards, including owner registries and law-enforcement access.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the episode's discussion of Google's Passkeys rollout, what was the core architectural shift that made the new model possible?

Question 1

In the episode's discussion of Google's Passkeys rollout, what was the core architectural shift that made the new model possible?

Browsers store site passwords and present them through HTTPS Servers exchange one-time codes and verify them against SMS channels Servers store shared secrets and verify derived password hashes Servers store public keys and verify challenge signatures

Question 2: What did Steve say about users who rely on shared public computers, such as in libraries or internet cafes, in the context of Passkeys?

Question 2

What did Steve say about users who rely on shared public computers, such as in libraries or internet cafes, in the context of Passkeys?

They would need a freestanding dongle because phones cannot authenticate They would need personal storage for their own public key pairs They can still use Passkeys if the website offers a password fallback They can use a single portable QR-code identity

Question 3: According to the episode, what did the U.S. Marshals Service's Technical Operations Group lose when its system was breached and left offline?

Question 3

According to the episode, what did the U.S. Marshals Service's Technical Operations Group lose when its system was breached and left offline?

A public dashboard for routine warrant statistics Its ability to process ordinary criminal court filings A key tool for real-time fugitive tracking and arrests Its secure portal for sharing body-camera footage

Question 4: Why did Google say it was replacing Chrome's padlock icon with the tune/settings icon?

Question 4

Why did Google say it was replacing Chrome's padlock icon with the tune/settings icon?

The lock icon was widely misunderstood as a trust indicator The lock icon was being deprecated because HTTPS itself was being removed The lock icon had become too rare to appear on most pages The tune icon better indicates certificate issuer identity

Question 5: What did the episode say about the proposed next-generation tracker specification's treatment of owner identity?

Question 5

What did the episode say about the proposed next-generation tracker specification's treatment of owner identity?

It keeps trackers anonymous unless a theft is reported It records the owner's identity and can expose obfuscated details nearby It stores the owner's identity only on the local device It encrypts the owner's identity so law enforcement cannot access it

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.