Abusing HTTP/2 Rapid Reset - Passkeys, ValiDrive follow-up, 2FA apps, pre-release Spinrite

• ValiDrive release follow-up
• Passkeys exportability and phishing risk
• Passkeys for device verification like SSH keys
• Possibility of hobby browsers vs. production browsers
• Availability of SpinRite 6.1 pre-release
• Filling drives with crypto noise using VeraCrypt
• Steve and Leo's favorite OTP apps
• Google Docs link rewriting could be to prevent referrer leakage
• Abusing HTTP/2 Rapid Reset

Show notes: https://www.grc.com/sn/SN-944-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Security Now episode 944
More Info: https://twit.tv/shows/security-now/episodes/944

Sponsors: …

2fa 2fa apps 2 rapid reset abusing apps availability browsers crypto device device verification drives http keys leo noise otp passkeys phishing rapid rapid reset release reset risk spinrite ssh ssh keys steve validrive veracrypt verification