HOTP and TOTP - SyncThing, Auto-Updates, Sci-Fi Recs

• Meta winds down 3rd-party content filtering. Is encryption soon to follow? • Taking over abandoned Command & Control server domains (strictly for research purposes only). • IoT devices to get the "Cyber Trust Mark" — Will anyone notice or care? • "SyncThing" receives a (blessedly infrequent) update. • Government email is not using encryption? Really? • Email relaying prevents point-to-point end-to-end encryption and authentication. • Just because Let's Encrypt doesn't support email doesn't mean it's impossible. • What Sci-Fi does ChatGPT think I (Steve) should start reading next? • To auto-update or not to auto-update? — is that one question or two? • And, until today, we've never taken a deep dive into the technology of time-varying 6-digit one time tokens. Show Notes - https://www.grc.com/sn/SN-1008-Notes.pdf Hosts: Steve Gibson and Leo Laporte Security Now episode 1008 More Info: https://twit.tv/shows/security-now/ep... Sponsors: • canary.tools/twit - use code: TWIT • uscloud.comjoindeleteme.com/twit promo code TWIT • 1password.com/securitynowzscaler.com/security Download or subscribe to Security Now at https://twit.tv/shows/security-now Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: https://grc.com/ also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Products we recommend: https://www.amazon.com/shop/twitnetca... TWiT may earn commissions on certain products. Follow us: https://twit.tv/   / twit     / twitnetwork     / twit.tv   https://bsky.app/profile/twit.tv About us: TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce dozens of hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, This Week in Google, Windows Weekly, Security Now, and more.

The Residential Proxy Threat - Malicious Proxies in Your Living Room
▶︎

The Residential Proxy Threat - Malicious Proxies in Your Living Room

RL for Agents Workshop - Deep Dive on Training Agents with RL and Open Source
▶︎

RL for Agents Workshop - Deep Dive on Training Agents with RL and Open Source

What Mythos Means - Marketing or Mayhem
▶︎

What Mythos Means - Marketing or Mayhem

TAKE ACTION: The war changes the market, the banks' turnaround, and the investment winners
▶︎

TAKE ACTION: The war changes the market, the banks' turnaround, and the investment winners

CyberRiskTV Live Coverage from Zero Trust World 2026 - Day 2
▶︎

CyberRiskTV Live Coverage from Zero Trust World 2026 - Day 2

I've Never Attempted This: Can I Replace A Soldered On CPU LIVE?
▶︎

I've Never Attempted This: Can I Replace A Soldered On CPU LIVE?

Zig 2026: No-AI Policy, $670K Foundation, Left GitHub & Why Zig Isn’t 1.0 - Andrew Kelley Explains
▶︎

Zig 2026: No-AI Policy, $670K Foundation, Left GitHub & Why Zig Isn’t 1.0 - Andrew Kelley Explains

PLC Troubleshooting 101.  Basic Steps to Diagnose and Fix Your Machine
▶︎

PLC Troubleshooting 101. Basic Steps to Diagnose and Fix Your Machine

AI Is Creating A Rare Opportunity For Investors. How Jim Roppel Is Playing It. | Investing With IBD
▶︎

AI Is Creating A Rare Opportunity For Investors. How Jim Roppel Is Playing It. | Investing With IBD

AI Training & Inference - Unencrypted Email, Doom Captcha
▶︎

AI Training & Inference - Unencrypted Email, Doom Captcha

Billionaire's WARNING: I'm SELLING. The Crash Is Already Here!
▶︎

Billionaire's WARNING: I'm SELLING. The Crash Is Already Here!

How to Learn Python | Python Programming | Learn Python | Intellipaat
▶︎

How to Learn Python | Python Programming | Learn Python | Intellipaat

How to Hide in Plain Sight: Next-Level Digital Privacy | Ivan Banov at BSidesCache 2025
▶︎

How to Hide in Plain Sight: Next-Level Digital Privacy | Ivan Banov at BSidesCache 2025

Passkeys Explained: Are They Actually Better Than Passwords?
▶︎

Passkeys Explained: Are They Actually Better Than Passwords?

JavaScript Tutorial For Beginners | JavaScript Training | JavaScript Course | Intellipaat
▶︎

JavaScript Tutorial For Beginners | JavaScript Training | JavaScript Course | Intellipaat

Australia - React’s Perfect 10 Mess
▶︎

Australia - React’s Perfect 10 Mess

Patch Tuesday à la AI - Arch Linux Repo Under Siege
▶︎

Patch Tuesday à la AI - Arch Linux Repo Under Siege

Building an AI Dark Factory:  A Codebase That Writes Its Own Code, Live
▶︎

Building an AI Dark Factory: A Codebase That Writes Its Own Code, Live

Attacking AI - Jason Haddix - NDC Security 2026
▶︎

Attacking AI - Jason Haddix - NDC Security 2026

Historian Timothy Snyder on ENDING Trump Nightmare FOR GOOD | PoliticsGirl
▶︎

Historian Timothy Snyder on ENDING Trump Nightmare FOR GOOD | PoliticsGirl