Light

Episode #934 Quiz

Revisiting Global Privacy Control
Date: 2023-08-08 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Voyager 2 restored telemetry after a DSN “shout” corrected an antenna mispointing. Tenable’s Amit Yoran and Bruce Schneier criticized Microsoft for delayed Azure vulnerability remediation and insecure key handling. Researchers also showed deep learning could recover laptop keystrokes acoustically from smartphone audio with 95% accuracy, even via Zoom compression.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: After Voyager 2 was accidentally turned 2 degrees away from Earth, what immediate communication strategy did NASA say it would use before waiting for the scheduled October orientation reset?

Question 1

After Voyager 2 was accidentally turned 2 degrees away from Earth, what immediate communication strategy did NASA say it would use before waiting for the scheduled October orientation reset?

Use the Hubble Space Telescope to relay a corrective command through a ground station Wait for the spacecraft's automatic reset in October and avoid all further commands until then Send a low-power status ping and let the onboard software infer the new Earth-pointing vector Use a Deep Space Network antenna to "shout" a corrective command while the antenna was still pointed away from Earth

Question 2: What was the key technical criticism Bruce Schneier made about the Microsoft Azure incident involving Chinese hackers?

Question 2

What was the key technical criticism Bruce Schneier made about the Microsoft Azure incident involving Chinese hackers?

Azure rejected all valid signing keys and forced attackers to brute-force tokens Azure accepted an expired signing key and the key should have remained inside the HSM Azure exposed plaintext passwords because its token service lacked TLS Azure reused a revoked certificate chain that let attackers mint session cookies

Question 3: According to Amit Yoran's LinkedIn post, what was the status of Tenable's reported Azure vulnerability when he wrote last week?

Question 3

According to Amit Yoran's LinkedIn post, what was the status of Tenable's reported Azure vulnerability when he wrote last week?

It had been fully fixed for all customers and no further action was required It had been patched only for bank customers but not for other tenants It was still undisclosed to Microsoft and had not yet been reported It had only a partial fix and older affected applications were still vulnerable

Question 4: What did the UK researchers achieve with their deep-learning keyboard acoustic attack when keystrokes were recorded by a nearby phone?

Question 4

What did the UK researchers achieve with their deep-learning keyboard acoustic attack when keystrokes were recorded by a nearby phone?

They reached 95% classification accuracy without using a language model They reached 95% accuracy only after adding handwritten feature engineering They reached 93% accuracy by recording the keystrokes through Zoom They reached 100% accuracy by restricting the model to laptop keyboards

Question 5: What is the limitation of Global Privacy Control as described in the episode, especially in California?

Question 5

What is the limitation of Global Privacy Control as described in the episode, especially in California?

It covers sale and sharing, but not the use of personal information It is enforced everywhere in the U.S. under a single federal privacy law It covers use and sharing, but not the sale of personal information It applies only to email addresses and not to browser identifiers

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.