SN 944: Abusing HTTP/2 Rapid Reset - Passkeys, ValiDrive follow-up, 2FA apps, pre-release Spinrite

• ValiDrive release follow-up


• Passkeys exportability and phishing risk


• Passkeys for device verification like SSH keys


• Possibility of hobby browsers vs. production browsers


• Availability of SpinRite 6.1 pre-release


• Filling drives with crypto noise using VeraCrypt


• Steve and Leo's favorite OTP apps


• Google Docs link rewriting could be to prevent referrer leakage


• Abusing HTTP/2 Rapid Reset

Show notes: https://www.grc.com/sn/SN-944-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit …

0-day vulnerability 2fa 2fa apps 2 rapid reset abusing apps availability browsers crypto ddos attacks device device verification docs drives drive wiping fido2 google google docs help & how to http iab19 ios keys leo leo laporte link noise otp passkeys phishing rapid rapid reset release reset risk security security now spinrite spinrite 6.1 ssh ssh keys steve steve gibson technology tracking links twit validrive veracrypt verification web browsers