Untitled attachment

Notices where this attachment appears

1. Embed this notice
   mhoye (mhoye@mastodon.social)'s status on Sunday, 28-Apr-2024 01:51:04 JST mhoye

   If the deliberate strangling of Mozilla's Persona a decade ago was the tragedy, this is the farce.

   https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

2. Embed this notice
   Techmeme (techmeme@techhub.social)'s status on Saturday, 27-Apr-2024 19:53:33 JST Techmeme

   Google and Apple use passkeys to capture users by locking credentials into their platforms and have made the UX of passkeys worse than that of password managers (William Brown/Firstyear's blog-a-log)

   https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/
   http://www.techmeme.com/240427/p5#a240427p5

3. Embed this notice
   Tim Bray (timbray@cosocial.ca)'s status on Saturday, 27-Apr-2024 12:47:37 JST Tim Bray

   Passkeys were hot last year, don’t seem to be catching on, here’s one view of why that is. Dark and sobering but convincing: https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

4. Embed this notice
   Volpeon :drgn_verified: :drgn_smol: (volpeon@is-a.wyvern.rip)'s status on Saturday, 27-Apr-2024 00:27:01 JST Volpeon :drgn_verified: :drgn_smol:

   However Chrome simply never implemented it leading to it being removed. And it was removed because Chrome never implemented it. As a result, if Chrome doesn't like something in the specification they can just veto it without consequence.(https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/ )
   
   Another case for the "Google has too much control over the web" evidence collection

5. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Friday, 26-Apr-2024 21:49:24 JST silverpill

   https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

   >enshittification that has undermined Webauthn

   As if no one could have seen it coming.

   Meanwhile, browser extensions are working just fine.

6. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 26-Apr-2024 15:24:36 JST Haelwenn /элвэн/ :triskell:
   > https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/
   
   So passkeys ended up going usernameless/resident aka doing the well known UX disaster *and* security disaster (keys need the ability to be rolled easily) of cryptography as the only mean of identification, and then of course ended up discovering that it actually doesn't works well at all.