hey what's up with this "passkey" thing i keep hearing about?
Uncategorized
8
Posts
1
Posters
0
Views
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
-
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
-
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
-
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
-
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
-
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
-
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
nobody should be allowed to work in computer security until they've spent several years doing technical support for end users who can't access their photos of their grandkids because some ASSHOLE in silicon valley decided that they needed to be locked down like the fucking vault at fort knox
-
undefined oblomov@sociale.network shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@mkljczk That's not the case: some Mastodon users don't know what Mostr is and often don't realize that they could block the entire instance using the appropriate feature.
As an instance administrator, I receive several requests of this type and believe it's important to provide information on these issues.
I understand that you disagree because you see this post as duplicating spam, but you should also try to understand that this information can be useful to others.
-
@handmade_ghost a hungry cartoon coyote smells the fresh pelicans out on the windowsill and floats along the scent lines (but they fly away just in time)
-
-
@release_candidate they are!
-
@superuserdo it's coming! 😉
-
@macfranc at this point you're worse than the nostr spammers bc everyone who cares about spam already has mostr<dot>pub blocked
-
@DigiDavidex appena le sue coronarie finiscono il computo della quantità di colesterolo derivato da decenni di salsicce.
-
This is despicable spam. All the most prestigious fact-checkers claim that no AI can perform serious fact-checking.
Some sites that have achieved good search engine rankings have started providing AI-powered fact-checking and—coincidentally!—have then been used to fake reports of serious abuses committed by ICE.
I therefore urge all recipients of this post to block this bot account and report it to your administrators!
PS: Please remember that reporting only serves your administrators, not Mostr; furthermore, blocking a user may not help, but the Nostr network is so limited that these cases aren't that common; furthermore, blocking a user may not help, but Nostr's network is so limited that these cases are not that common..
For now, I won't block the Mostr bridge, but I might change my mind if this spam continues.
Thanks and sorry for the long post!
@indieauthornews
@DarkWebInformer
@Chia
@menherahair
@SamFish90
@mainframed767
@fr@pubeurope.com
@uk@pubeurope.com
@afg
@de@pubeurope.com
@us@pubeurope.com
@inbella@channels.im
@ct_Magazin
@wikipedia_fr
@same_Atelier
@theintercept
@momo
@SocraticEthics
@johncarlosbaez
@YoRoZ
@NFL
@aotako32
@minenest@channels.im
@e10
@gulu1874
@minoson
@Klarmann
@EWI
@sunwoo1524
@50years_music
@europesays@pubeurope.com
@usluck@channels.im
@GrumpyRabbit
@cbcbc_mirror
@fxoxo@channels.im
@Geri
@privacyint
@Neoresistant
@cecallihelper.bsky.social
@rinonpic
@wvmierlo
@Jonny
@creamqueen
@BytesDE@pubeurope.com
@tcm_b_c
@formidablebot
@ryzabot
@spatsbot
@brozu
@rogue_corq
@Breaking911
@todayilearned
@danddv77
@dnc
@dbat
@aus_der_UBahn
@cy
@All_bonesJones
@DiarioDeNavarra
@hfaust
@ShiLasu13
@gizmodo_es
@Karolina
@ritardato
@yle_fi_bot
@gazette
@franceinter
@hobbs
@NatalieDavis
@jihou_bot
@kevinrothrock
@eriner@noauthority.social
@_plz
@snowgaze
@Bugspriet
@b000ka
@Sw_taco
@suika_san
@KimPerales
@benzogaga33
@alcade
@mike
@pavel
@vietnam_aujourdhui
@Unabart
@aoinoue
@mkljczk
@cbcottawa_mirror
@ayunua
@vilain
@RevXenoFact
@yagigoat
@apjnjgaxsdkkkkj
@kallekn
@coolboymew
@Lemonid
@fedithom
@beka_valentine
@matrix
@gomoot
@Lino0876
@RConsortium
@xChaos
@oza_osuwari
@Nudhul
@lain
@shuro
@BleepingComputer
@necono
@creseveur
@gazanotice
@MummaBear@noauthority.social
@owenbroadcast
@bossito
@curtosis
@bnonews
@MelaNews
@dpk
@YandereLewdBot
@takenji1989pics
@frankel
@newts
@mackuba.eu
@etherdiver
@salyavin
@CoMaps
@rebootbrain
@cjd
@glcanada_mirror
@Sssus
@z_everson
@maria
@20002ist
@Computer
@Collector
@leerayl
@Kobanobu
@giuglionasi
@Luke
@jeffcliff
@Gina
@Poweruser
@jaseg
@ninafromcanadaeh
@rationalgarde
@alex
@sniflaye
@tferrer
@hn50
@FluentInFinance
@fiobot
@farah
@tyler
@CatEveryHour
@elhackernet
@vingtroiseize
@dougbinks
@adamsdesk
@hj
@Sui
@TimeExtension
@Michigander
@EUCommission
@dannotdaniel
@zero
@Jeanneadebats
@DieFurie
@gooba42
