hey what's up with this "passkey" thing i keep hearing about?
Uncategorized
8
Posts
1
Posters
0
Views
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
-
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
-
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
-
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
-
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
-
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
-
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
nobody should be allowed to work in computer security until they've spent several years doing technical support for end users who can't access their photos of their grandkids because some ASSHOLE in silicon valley decided that they needed to be locked down like the fucking vault at fort knox
-
undefined oblomov@sociale.network shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@DarioZanette @dado aggiornato con i sottotitoli italiani :)
-
@stefano
It's too bad she won't live. But then again, who does?Enjoy!
-
North Sea Radio Orchestra – Dronne (2016)
Avevamo lasciato Craig Fortman alle prese con il suo progetto Arch Garrison, ma nel mentre la sua arte veniva messa a disposizione di un'iniziativa che coinvolgeva non solo la sua formazione North Sea Radio Orchestra, ma anche Pascal Comelade, l’ex-Cardiacs William D. Drake, l’ex-Henry Cow John Greaves, Elise Caron... https://noblogo.org/available/north-sea-radio-orchestra-dronne-2016
Segui il blog e ascolta un album al giorno: @available
-
@mkljczk You say none of them care? I explained to you that, precisely because of the spam they received, they became unwillingly interested parties. But it seems to me you don't want to understand my reasons. What do you want to do? Do you want to keep accusing me and repeating what you've already told me?
-
@evansky_arts impossible de choisir ils sont trop mignons et ils méritent tous les deux stickers *et* figurine 🥺
-
@macfranc you literally tagged 155 users in a post they don't care about
-
I used the initials “TSA” on an arcade high score table for the first time ever. 🩷
-
@mkljczk That's not the case: some Mastodon users don't know what Mostr is and often don't realize that they could block the entire instance using the appropriate feature.
As an instance administrator, I receive several requests of this type and believe it's important to provide information on these issues.
I understand that you disagree because you see this post as duplicating spam, but you should also try to understand that this information can be useful to others.
