Security Now with Steve Gibson and Leo Laporte

Oct 17th 2023

Security Now 944

Abusing HTTP/2 Rapid Reset

Passkeys, ValiDrive follow-up, 2FA apps, pre-release Spinrite

Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.
Category: Help & How To
  • ValiDrive release follow-up
  • Passkeys exportability and phishing risk
  • Passkeys for device verification like SSH keys
  • Possibility of hobby browsers vs. production browsers
  • Availability of SpinRite 6.1 pre-release
  • Filling drives with crypto noise using VeraCrypt
  • Steve and Leo's favorite OTP apps
  • Google Docs link rewriting could be to prevent referrer leakage
  • Abusing HTTP/2 Rapid Reset

Show notes:

Download or subscribe to this show at

Get episodes ad-free with Club TWiT at

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site:, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.