Believe me, as someone who had two devices pocket "smart" phones die on me this year, so-called "device instability" is a real problem.

But educating me? I'm only on a first name basis with a handful of PhDs in cryptography.

Good thing I am also still a student and open to education.

But might I ask: have you ever been incarcerated or had all of your physical possessions forcibly removed from you?

Because I have and I was still able to regain access to accounts despite that.

Some authentication choices are chosen deliberately for threat models that I don't think passkeys are even beginning to try to comprehend.

There are a lot of authentication mechanisms I avoid because they have extremely bad failure modes.

But I am not here to teach lessons in those to people who think that I need more education, unless you're paying my tuition for me because I already am in debt and homeless.

Meanwhile, to borrow a phrase from a past coworker: "we now have more people [developers] creating problems than we have people [ops] capable of fixing them."


CC: @dalias@hachyderm.io @whitequark@mastodon.social @emma@orbital.horse @mcc@mastodon.social