Light

Episode #933 Quiz

TETRA:BURST
Date: 2023-08-01 | Length: 2 hrs | Episode page at twit.tv

About this episode

Episode 933 detailed how attackers route APT command-and-control through satellite DVB-S broadcasts: malware sends UDP to a satellite ISP address, triggering downstream rebroadcast across a satellite footprint while the attacker’s ground station listens and replies over terrestrial Internet. It also covered iOS/Android anti-tracking changes and TETRA:BURST flaws.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what specific advantage does satellite DVB-S hijacking give an APT command-and-control setup when the malware first sends traffic to a satellite ISP customer IP?

Question 1

According to the episode, what specific advantage does satellite DVB-S hijacking give an APT command-and-control setup when the malware first sends traffic to a satellite ISP customer IP?

It redirects all satellite traffic to the attacker by compromising the satellite's onboard routing tables It encrypts the malware's traffic so that only the attacker can decrypt it at the satellite gateway It causes outbound packets to be rebroadcast across the satellite's coverage area, where a hidden passive receiver can capture them It forces the victim enterprise to bypass NAT and expose inbound ports directly to the Internet

Question 2: What was the key consequence of Apple’s updated developer policy discussed in the episode for apps using device-level fingerprinting?

Question 2

What was the key consequence of Apple’s updated developer policy discussed in the episode for apps using device-level fingerprinting?

Apps must provide Apple a valid reason to keep access to those tracking-related APIs Apps may keep using those APIs only after users opt into a new carrier-level tracking contract Apps must replace all fingerprinting with Bluetooth proximity tokens before App Store review Apps can keep using those APIs only if they disable all third-party analytics libraries

Question 3: What did Google’s Android change, as discussed in the episode, initially begin to roll out for Android 6.0+ users?

Question 3

What did Google’s Android change, as discussed in the episode, initially begin to roll out for Android 6.0+ users?

Automatic removal of all third-party location apps from Android devices Mandatory encryption for all Bluetooth Low Energy advertisements Unknown tracker alerts for Bluetooth trackers traveling with the user A new requirement that all tracker manufacturers use Apple’s AirTag hardware

Question 4: In the TETRA:BURST discussion, what did the researchers do to obtain the secret TETRA encryption algorithms before reversing them?

Question 4

In the TETRA:BURST discussion, what did the researchers do to obtain the secret TETRA encryption algorithms before reversing them?

They derived the algorithms by brute-forcing the 80-bit keys with a GPU cluster They recovered the algorithms from a leaked source-code repository maintained by the Dutch police They bought a Motorola MTM5400 radio and used zero-day exploits to extract the algorithms from its secure enclave They obtained the algorithms from an ETSI public archive after the embargo expired

Question 5: What was the practical weakness in TETRA’s time synchronization that enabled the keystream attack Steve described?

Question 5

What was the practical weakness in TETRA’s time synchronization that enabled the keystream attack Steve described?

The base station signs the timestamp but omits the radio’s identity from the signature The network broadcasts the time in unauthenticated, unencrypted packets The radios derive their keystream from a locally random clock that cannot be reproduced The keystream changes only when a handset reboots, making replay straightforward

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.