<ul> 
<li>What do we learn from January's record breaking 0-day critical Patch Tuesday?</li> 
<li>Microsoft to "force-install" a new Outlook into all Windows 10 and 11 desktops?</li> 
<li>GoDaddy required to get much more serious about its hosting security.</li> 
<li>More age verification enforcement is coming, including globally.</li> 
<li>What another instance of a widely exposed management interface teaches us.</li> 
<li>DJI drone's official firmware update lifts geofencing for unrestricted flight.</li> 
<li>CISA's efforts pay off with MUCH improved critical infrastructure security.</li> 
<li>Listener feedback about TOTP, HOTP and age-verification.</li> 
<li>And we take a deep dive into cracking authenticator keys</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-1009-Notes.pdf">https://www.grc.com/sn/SN-1009-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to Security Now at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank">vanta.com/SECURITYNOW</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank">bitwarden.com/twit</a></li>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&amp;utm_source=twit&amp;utm_campaign=securitynow" target="_blank">threatlocker.com for Security Now</a></li>
<li><a href="https://www.veeam.com/?utm_source=twit.tv&amp;utm_medium=audio&amp;utm_campaign=brand-campaign&amp;utm_content=sn" target="_blank">veeam.com</a></li>
</ul>

SN 1009: Attacking TOTP - Force-Installed Outlook, DJI Firmware Update