Technology

59143 readers

2649 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

517

2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed (www.tomsguide.com)

submitted 3 months ago by fmstrat@lemmy.nowsci.com to c/technology@lemmy.world

141 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] QuarterSwede@lemmy.world 4 points 3 months ago (1 children)

… passkeys basically do all this without you having to know how. Your device /is/ the physical key and /you/ are the secondary auth. It honestly doesn’t get any easier for the user.

[–] ag10n@lemmy.world 1 points 3 months ago (1 children)

What options are there for migrating passkeys to a new device? Easy to lock you into that iPhone and you must use their migration tool when you upgrade. Or I just carry it on my keychain, no vendor lock in.

[–] QuarterSwede@lemmy.world 1 points 3 months ago* (last edited 3 months ago) (1 children)

3rd party password managers are already adding passkey support. Passkeys isn’t an Apple only security technology. FIDO has its place but passkeys is the future for most people like it or not.

[–] ag10n@lemmy.world -1 points 3 months ago (1 children)

Do I need a subscription service for this passkey supported password manager? Or I can just buy a hardware key that can be used on my phone or any device, password manager supported or not. Seems like the freedom and portability of a physical key, like a key to your home or car makes a ton of sense.

Passkeys are based on and supported by the FIDO alliance.

https://fidoalliance.org/passkeys/

[–] QuarterSwede@lemmy.world 0 points 3 months ago (1 children)

You don’t need a subscription as you well know since you know what they’re based on. And I meant FIDO physical keys as you were alluding to. Why would I ever want another device to use with a device that already has biometric auth? That last a barrier of entry that’s too high for most people.

[–] ag10n@lemmy.world 1 points 3 months ago

Passkeys are a replacement for passwords, not a second factor like requiring a physical key.

Why would I reduce the number of factors and also entrust what should be something I know to a vulnerable key store.

https://www.bleepingcomputer.com/news/security/new-tpm-20-flaws-could-let-hackers-steal-cryptographic-keys/