Conversation

Notices

1. Embed this notice
   Max Leibman (maxleibman@beige.party)'s status on Saturday, 13-Dec-2025 01:24:26 JST Max Leibman

   I view passkeys as an exciting opportunity to find new ways to lock myself out of my own accounts.
   #infosec

   • Embed this notice
     Gustavo (qgustavor@urusai.social)'s status on Saturday, 13-Dec-2025 04:44:40 JST Gustavo

     • Infoseepage

     @Infoseepage @maxleibman To be fair, resilience is put in second place over usability when designing alternatives to passwords, mostly because it's easier to say "just buy a second device/key" than trying to solve it in other way. Also because the companies designing those alternatives happen to sell phones and security keys.

   • Embed this notice
     Tony Hoyle (tony@toot.hoyle.me.uk)'s status on Saturday, 13-Dec-2025 18:36:00 JST Tony Hoyle

     • Infoseepage

     @Infoseepage @maxleibman Even in this *room* I regularly flip between 3 different browsers (gaming machine, laptop, phone). So many implementations assume a single device.. it's just not thought out.

     And don't get me started on the implementations that require Windows, or Chrome, or both.