Light

Episode #928 Quiz

The Massive MOVEit Maelstrom
Date: 2023-06-20 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Microsoft patched 73 flaws, including 26 remote code execution bugs and a 9.8 SharePoint authentication bypass using spoofed JSON Web Token access. Researchers then showed power LED video leaks: rolling-shutter cameras can sample LED brightness at 60K Hz, recovering cryptographic keys from smart cards and phones without prior device compromise.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what specific video-camera feature did Ben Nassi's group exploit to raise the effective sampling rate for power-LED analysis, and to what approximate rate did they claim it could reach on an iPhone 13 Pro Max?

Question 1

According to the episode, what specific video-camera feature did Ben Nassi's group exploit to raise the effective sampling rate for power-LED analysis, and to what approximate rate did they claim it could reach on an iPhone 13 Pro Max?

The rolling shutter, to about 60K measurements per second Image stabilization, to about 6K measurements per second Optical zoom, to about 60K measurements per second Infrared capture, to about 600 measurements per second

Question 2: What was the exact attack setup used in the first demonstrated cryptanalytic case described in the paper, as summarized on the show?

Question 2

What was the exact attack setup used in the first demonstrated cryptanalytic case described in the paper, as summarized on the show?

A 256-bit RSA key from a laptop via a Bluetooth microphone array A 256-bit ECDSA key from a smart card via a hijacked Internet-connected security camera A 378-bit SIKE key from a smart card via a local USB microscope A 128-bit AES key from a phone via an isolated thermal camera

Question 3: Which combination best matches the second demonstrated attack in the paper, including the target device, the observed LED source, and the camera used?

Question 3

Which combination best matches the second demonstrated attack in the paper, including the target device, the observed LED source, and the camera used?

A Samsung Galaxy S8, Logitech Z120 USB speakers, and an iPhone 13 Pro Max A Samsung Galaxy S8, an HP printer status light, and an Android tablet An iPhone 13 Pro Max, a smart card reader, and a Logitech webcam A Dell laptop, a router activity LED, and a Hikvision security camera

Question 4: What was the role of the file named human2.aspx in the MOVEit compromise, according to the episode?

Question 4

What was the role of the file named human2.aspx in the MOVEit compromise, according to the episode?

It functioned as a log file for recording failed login attempts It functioned as a web shell for remote control of an ASP-capable server It functioned as a decoy static page to absorb benign traffic It functioned as a patch installer for removing the SQL injection flaw

Question 5: What did Progress announce on June 16th regarding MOVEit Cloud and MOVEit Transfer customers after the newly discovered SQL injection issue?

Question 5

What did Progress announce on June 16th regarding MOVEit Cloud and MOVEit Transfer customers after the newly discovered SQL injection issue?

They had restored MOVEit Cloud and told Transfer customers to apply a new patch They had decommissioned MOVEit Cloud and told Transfer customers to stop using HTTP only They had migrated all customers to FTP-only access until the investigation ended They had confirmed no new vulnerability and told customers no further action was needed

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.