Lochner Tech News
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
lemmydividebyzero@reddthat.com to Technology@lemmy.worldEnglish · 19 days ago

I don't like passkeys | Ethan Hawksley

hawksley.dev

external-link
message-square
171
link
fedilink
435
external-link

I don't like passkeys | Ethan Hawksley

hawksley.dev

lemmydividebyzero@reddthat.com to Technology@lemmy.worldEnglish · 19 days ago
message-square
171
link
fedilink
Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.
  • ѕєχυαℓ ρσℓутσρє@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    18 days ago

    I don’t understand one thing about hardware keys. Aren’t they, like, easy to steal? Sure, someone could torture my Bitwarden masterkey out of me, but hardware keys seem to make sabotage much much easier.

    • 4am@lemmy.zip
      link
      fedilink
      English
      arrow-up
      8
      ·
      19 days ago

      They’re as easy to steal and misuse as a laptop with KeePassX on it. Hardware as a second factor was always a better use case.

    • Natanael@infosec.pub
      link
      fedilink
      English
      arrow-up
      7
      ·
      18 days ago

      You can PIN lock hardware keys

      • ѕєχυαℓ ρσℓутσρє@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        18 days ago

        That’s good to know.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2.57K users / day
  • 8.06K users / week
  • 14K users / month
  • 18.9K users / 6 months
  • 1 local subscriber
  • 88.8K subscribers
  • 2.34K Posts
  • 52.4K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.worldB
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org