Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

What is the primary reason that the CA/Browser Forum reduced the domain validation reuse period from 397 days to 199 days as mentioned by DigiCert?

To reduce the workload on Certificate Authorities by shortening certificate lifetimes. To improve the overall security by requiring more frequent domain revalidation. Due to technical limitations in certificate issuance software forcing shorter periods. To comply with new government regulations unrelated to security concerns.

Question 2

According to the ETH Zurich research discussed, what common cryptographic mistake did LastPass have that impacted vault integrity?

Use of AES-CBC mode without ciphertext integrity checks, allowing detection failures after decryption. Implementing outdated public key algorithms that are vulnerable to quantum attacks. Lack of client-side encryption causing server-side plaintext storage of vault data. Use of weak passwords as master keys by default for users.

Question 3

Why is it technically impractical for 3D printers to comply with legislation requiring them to block printing of firearm parts?

3D printers lack on-board processing power for complex file analysis and are easily hacked, making screening ineffective. Modern 3D printers automatically encrypt print files, preventing any examination of their contents. Because firearms are exclusively printed using proprietary machines that are exempt from these laws. All 3D printing is done remotely on servers that filter files, so printer-level blocking is unnecessary.

Question 4

What does the 'ClickFix' attack exploit to achieve over half of all malware loader activity in 2025 according to Huntress Labs?

Tricking users into performing system commands by masquerading as legitimate tasks like CAPTCHAs that request keyboard shortcuts and paste commands. Hijacking DNS responses to redirect users to fake update servers for malware installation. Using malicious browser extensions to steal clipboard data and credentials. Exploiting buffer overflow vulnerabilities in web browsers to execute arbitrary code silently.

Question 5

Regarding passwords generated directly by Large Language Models (LLMs), what is the fundamental weakness highlighted in the episode?

LLMs lack the ability to combine uppercase, lowercase, numbers, and symbols simultaneously in passwords. LLMs do not generate passwords of sufficient length and complexity to be considered strong by modern standards. LLMs produce passwords based on token prediction, not on uniformly random sampling, making generated passwords predictable and reused. Passwords generated by LLMs are encrypted with weak algorithms by default, risking compromise.

Cancel

Episode #1066 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5