hey what's up with this "passkey" thing i keep hearing about?
Uncategorized
8
Posts
1
Posters
0
Views
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
-
hey what's up with this "passkey" thing i keep hearing about? is it one of those things computer security dingbats come up with every few years that purports to solve problems with existing workflows but does it by making assumptions that don't hold for 40–60% of users and ultimately end up making things both less convenient and less secure? surely not
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
-
Passkey is the de facto non-technical term for a WebAuthn credential.[5][6] It is widely used in situations where jargon is unhelpful,
you can't see me but i'm making the jim office face at the camera rn
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
-
tying authentication to hardware like a yubikey or tpm makes a lot of sense in the corporate environments that gestate these brain geniuses. for consumer use cases it is fucking insane. a thousand years in super hell for all of you.
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
-
they can be used with password managers? great! you know what else can be used with password managers? PASSWORDS.
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
-
every single problem this purports to solve for normal consumers has already been solved better by web browsers that implement password generation and autofill
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
-
This eliminates common vulnerabilities such as: [...] Poor client-side password storage (e.g., written down, stored in phone contacts).
where is my fucking hammer
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
-
people writing down the password to their work computer and taping it to the monitor is a problem. sure. a hardware passkey is a solution to this. but for most people in most circumstances, writing down passwords to their personal devices in a way that they (a) are recoverable in case nana loses her ipad or whatever and (b) are recoverable by family in case nana fucking dies, is a FEATURE. NOT A BUG.
nobody should be allowed to work in computer security until they've spent several years doing technical support for end users who can't access their photos of their grandkids because some ASSHOLE in silicon valley decided that they needed to be locked down like the fucking vault at fort knox
-
undefined Oblomov shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@ilcomizietto Appena in tempo per il 12 p.v. 😉
-
@inherentlee YMMV, but I've found that if the laces are long enough and it's cross-laced with bunny ears at the waist wearing it on your own in front of a full-body mirror is not completely impossible
but I'd recommend trying it the first time when there is somebody else to save you in case you get stuck
spiral lacing is not impossible either, just a huge PITA
but always with help available if needed
don't ask me how I know :D
(I think that the scene when I got stuck was funny. afterwards :D )
-
@photex it's amazing how bad people want to believe in the idea of "lazy people" despite it lacking any scientific basis what so ever
-
@JoshJers it's amazing how much work the healthcare system heaps on you when you're least able to handle it
-
-
@thatgiga
Che non avrà nessun valore tanto è già scaduto...
-
@aeva I got diagnosed at 20 but my parents told me it was full of shit and that it was a fake disease to sell prescriptions or something.
I’ve been coming to the conclusion lately that this was not likely the only diagnosis I’ve been given in my life that my parents refused to acknowledge.
-
The 2025 FreeBSD Vendor Summit begins tomorrow.
Day 1 Program:
• Keynote: Operationalizing AI for Engineering at NetApp — Jerome Roussin & Chris Archibald
• The Business Impact of FreeBSD’s Security and Stewardship — Michael Winser
• New in 15.0 Demo — John Baldwin (FreeBSD Project) & Ed Maste (FreeBSD Foundation)
• FreeBSD Foundation Update — Deb Goodkin & Ed Maste
• Round Robin Discussion & Networking ReceptionWatch tomorrow's sessions live here:
https://youtube.com/live/UB4xpQ5ad0Q
