Is this the new “killing baby Hitler”?

I want to send all mosquitos into the aether

I don’t disagree with any of that. You and I will be fine, as long as whatever sites we use don’t insist on evil-only providers. The trouble I’m thinking of is for average uncritical phone enjoyers who are guided into a flow where they’re migrated to using passkeys with whatever propriety junk they’re using and end up locked into Matacorp Secure Cloud who now control their access to all their accounts, where once they had a list of passwords written in the back page of their diary.

Cool. Hope it’s ok on your health. I suppose you have some way to keep your phone safe, and don’t need to do 2FA while exposed to all of those things. You could probably wrap one up pretty well and still have the NFC work too.

I couldn’t possibly argue with that

The kind of lock in I’m thinking of is with e.g. Google, Apple, or Microsoft when they take charge of the passkeys for you.

Do you work in a blender? It’s a pretty solid bit of plastic, should be fine in a pocket or wherever the device you’re using it with is.

I follow you, but if we can impose passkeys on the security-inept people we are forced to give our sensitive data to, couldn’t we instead force them to use good security?

That doesn’t say anything about passwords. Looks like someone’s device was accessed. Maybe you just understand this better than I do.

I think the point about lusers not being able to manage passwords has been argued to death elsewhere, so I won’t take issue with that.

me having good password hygiene doesn’t stop my data being hacked when someone working at a subcontracting firm to a company I use leaks all my data

What has this to do with passkeys? Are you sending your password in plaintext to the contractor who stores it that way, unencrypted? That’s a separate problem entirely. The only benefit I see with just sending them your public key is that they can’t leak your private key, whereas if you used one password for everything, and sent it to them, they could leak it.

Am I missing something? Would passkeys offer an advantage over a password manager? What if the website assigns you a password via DH so that users can’t pick bad ones or reuse them, would it have the same advantages?

2FA can be super annoying, but again I think it’s a separate issue. If I get control of your phone or laptop then 2FA might save you, but passkeys won’t.

Not much of a rebuttal imho. We still have the problem that passkeys are ok in theory, but in practice they’re being pushed as a way to increase lock-in and don’t offer compelling advantages over well-managed passwords.

But don’t you dare add one to the Einstein field equation!

Multiplicative, something to cancel out the extra powers of length per time from c^n

You’d need another constant! All those expressions are dimensionally wrong, only c² fits.

Removed by mod

Removed by mod

Removed by mod

This.

Home School Firing Squad

Derelicte my balls