• 0 Posts
  • 148 Comments
Joined 1 year ago
cake
Cake day: February 27th, 2025

help-circle















  • It starts with “they are giving up the shares voluntarily,” then three months later Mike Johnson introduces the Artificial Intelligence Secure from Terrorism United Patriotic Information Delivery bill (AI-STUPID) that authorizes the emergency purchase of 16 Trillion US Dollars of AI shares on taxpayer dime. 14 go to the AI companies, 2 will water the swamp.

    The White House Ballroom is the blueprint, and itself it is the brain child of the Mexican Safety and Security Border Wall.




  • manxu@piefed.socialtoPrivacy@lemmy.mlPasskeys
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 months ago

    I think the thought process from the site’s perspective is simple: most of the attempts to hack into an account come from devices they have never seen, from places the user has never been. All a passkey does is tie your account to a “logical place,” a device (whether a browser, a phone, or a specific hardware key).

    The passkey itself doesn’t tell the server anything it doesn’t know already, it just confirms it, so there really isn’t a whole lot of privacy implication beyond general concerns.

    The big problem, and it’s a more universal problem, comes when you are trying to log in from a device that has no passkey. Maybe you forgot your phone, or you bought a new computer, or something else. The “forgot password” flow, and the related “I am on a new device” flow are some of the weakest spots for computer security, because they presume that something happened that automatically lowers security credentials.

    What I like about one-time codes like GAuth is that you can transfer the keys from device to device yourself. You are very rarely going to be in a position where you can’t access the keys, and as a result it’s fine to put you through extraordinary measures to reset your security. The issue with passkeys is that it’s pretty common that you’ll be using a new device, and as such you can’t be forced to go through hoops every time you need to register a new one.