January 21, 2025

Security Now 1009: Attacking TOTP

Listen Later

3 hours 7 minutes

What do we learn from January's record breaking 0-day critical Patch Tuesday?

Microsoft to "force-install" a new Outlook into all Windows 10 and 11 desktops?

GoDaddy required to get much more serious about its hosting security.

More age verification enforcement is coming, including globally.

What another instance of a widely exposed management interface teaches us.

DJI drone's official firmware update lifts geofencing for unrestricted flight.

CISA's efforts pay off with MUCH improved critical infrastructure security.

Listener feedback about TOTP, HOTP and age-verification.

And we take a deep dive into cracking authenticator keys

Show Notes - https://www.grc.com/sn/SN-1009-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

vanta.com/SECURITYNOW

bitwarden.com/twit

threatlocker.com for Security Now

veeam.com

...more

View all episodes

View all episodes

Download on the App Store

Download on the App Store

Get it on Google Play

Total Leo (Video)

By TWiT

3.5

1515 ratings

January 21, 2025

Security Now 1009: Attacking TOTP

Listen Later

3 hours 7 minutes

What do we learn from January's record breaking 0-day critical Patch Tuesday?

Microsoft to "force-install" a new Outlook into all Windows 10 and 11 desktops?

GoDaddy required to get much more serious about its hosting security.

More age verification enforcement is coming, including globally.

What another instance of a widely exposed management interface teaches us.

DJI drone's official firmware update lifts geofencing for unrestricted flight.

CISA's efforts pay off with MUCH improved critical infrastructure security.

Listener feedback about TOTP, HOTP and age-verification.

And we take a deep dive into cracking authenticator keys

Show Notes - https://www.grc.com/sn/SN-1009-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

vanta.com/SECURITYNOW

bitwarden.com/twit

threatlocker.com for Security Now

veeam.com

...more