Passkeys are a trap. Do not use them

Intended audience: non-technical citizens of the web

begrudgedcarfolk 20 points 15 hours ago

I wouldn't be surprised if five years down the line companies figure out a way to use pass keys as a way to de-anonymize and track people.

save

path: 0 26286705, hotness: undefined, score: 20, children: 6

waltersf 4 points 14 hours ago

Why? Just give them another passkey.
Usage isolation is 🥁 key.
The article is about the weakness of TOTP, not passkeys themselves.

save

path: 0 26286705 26287525, hotness: undefined, score: 4, children: 5

lIlIlIlIlIlIl 2 points 14 hours ago

TOTP is a great solution.

It is?

save

path: 0 26286705 26287525 26287609, hotness: undefined, score: 2, children: 4

waltersf 3 points 14 hours ago

Keep reading. The Hack explains how corporations can arbitrate which type of passkeys they might allow when their TOTP authenticator refuses your passkey settings.

save

path: 0 26286705 26287525 26287609 26287671, hotness: undefined, score: 3, children: 3

hackernews

@lemmy.bestiver.se

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

go to feed...

hackernews

@lemmy.bestiver.se

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

go to feed...