SN 1035: Cloudflare's 1.1.1.1 Outage - Bypassing Passkey Protections

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 22 July 2025

⏱️ 168 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Bypassing all passkey protections.
The ransomware attacks just keep on coming.
Cloudflare capitulates to the MPA and starts blocking.
The need for online age verification is exploding.
Microsoft really wants Exchange Servers to subscribe.
Russia (further) clamps down on Internet usage.
The global trend toward more Internet restrictions.
China can inspect locked Android phones. Use a burner.
Web shells are the new buffer overflow.
An age verification protocol sketch.
What Cloudflare did to create an outage of 1.1.1.1

Show Notes - https://www.grc.com/sn/SN-1035-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here with news of a pass key bypass.
0:07.0	Yikes. We'll also talk about problems Cloudflare had with its DNS provider and explain what happened.
0:15.0	Russia clamps down, really clamps down on the internet usage, and some advice if you're planning to travel to
0:22.8	China frankly anywhere stay tuned security now is next podcasts you love from people you trust
0:33.1	this is twit this is security now is This is Twitter.
0:48.3	This is Security Now with Steve Gibson, episode 1,035, recorded Tuesday, July 22nd, 2025,
0:52.7	Cloudflare's 1.1.1.1. outage.
0:55.2	It's time for security now.
0:58.4	The show where we cover your security and your privacy online.
1:03.5	We talk about all the exciting stuff happening in the world with this guy right here, Mr.
1:04.7	Steve Gibson.
1:07.8	A show we wait all Tuesday for.
1:09.3	Hello, Mr. Steve Arino.
1:10.7	All Tuesday? All week for Tuesday. No. Okay. There we go. Hello, Mr. Steve Arino. All Tuesday. Oh, all week for Tuesday. Oh, okay. There we go.
1:14.3	That's better. From the end of the previous show. I wait. I wait all day for this show.
1:19.8	That's right. You're busy all morning before this show. No, I wait. I do look forward to it all week because
1:25.0	you always find some interesting stuff. In fact, this week I even sent you some things.
1:29.4	I don't know if you use them, but I sent you some things to talk about.
1:32.5	You did, and they're going to need, I've been aware of homomorphic encryption for quite a while.
1:40.3	I'm sure you're the first person ever mentioned it in my presence.
1:43.6	Mind scrambling technology. The fact that you're the first person ever mentioned it in my presence. Mind scrambling technology.
1:45.5	The fact that you're able to operate on data without decrypting it. That's crazy.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.