Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! episode transcript, what specific technique did the GhostPoster malicious browser extensions use to evade traditional security detection in Firefox, Edge, and Chrome?

Hijacking browser extension update mechanisms for payload delivery. Exploiting zero-day vulnerabilities in browser rendering engines. Utilizing DNS rebinding attacks to hijack traffic. Embedding malicious payloads in PNG icon files using steganography.

Question 2

What is the primary operational drawback of the approach taken by ANCHOR compared to the original CIPAC for industry-government cyber threat information sharing, as discussed in the episode?

Overly rigid requirement for individual charters for each subcommittee. Complete absence of participation by private sector industry executives. Lack of any mechanism to open meetings or transcripts to the public. Uncertainty around the scope and consistency of liability protections for participants.

Question 3

Based on the episode's discussion, why does Steve Gibson disagree with the Electronic Freedom Foundation's (EFF) absolutist stance on encryption privacy in light of intelligence agency capabilities?

Because he believes law enforcement has no interest in mass data collection due to privacy laws. Because intelligence agencies' data collection and future quantum computing capabilities create a need for archival storage of encrypted data. Because he believes perfect forward secrecy is unbreakable and negates mass surveillance. Because the EFF exaggerates encryption flaws due to lack of technical understanding.

Question 4

What security improvement is enabled by the newly available six-day Let’s Encrypt certificates, according to the podcast?

They enforce mandatory multi-factor client authentication at TLS handshake. They provide automatic DNSSEC validation as part of certificate issuance. They make revocation unnecessary by employing quantum-resistant algorithms. They reduce the vulnerability window caused by reliance on unreliable revocation mechanisms.

Question 5

Regarding the GhostPoster campaign’s infection timeline, which of the following best describes the progression and current scope as revealed in the episode?

Chrome was the primary initial target beginning in 2018, followed by Edge and Firefox in 2020, totaling about 200,000 installs. It originated on Microsoft Edge in early 2020, expanded to Firefox and Chrome, with over 840,000 installs identified, some active for up to five years. All major browser extensions were infected simultaneously in late 2022, with detection and removal within months. It began on Firefox in 2024, then spread to Chrome and Edge with limited installs under 50,000.

Cancel

Episode #1061 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5