6 ms·
Who's fooling who? This distinction sounds a lot like the "no true password" fallacy. In the common usage, passwords are not as narrowly defined as your usage
by recursive 5y ago
Who's fooling who? This distinction sounds a lot like the "no true password" fallacy. In the common usage, passwords are not as narrowly defined as your usage here. I'm sure you're familiar with the trope of people writing passwords on post-it notes. Would that make it not actually a password? I don't think so. I don't think most other people do either.
I'm definitely not convinced that the brave new password-less future is an improvement. I still don't understand how I'm supposed to log in to the same account on two different devices. WebAuthN and others seem to just punt. "That's the relying party's problem".
It feels a lot to me like I'm slowly getting funneled into some MegaCorp's identity database. No thanks. I'll get rid of my passwords when someone can show me something better.
- WorldMaker 5y agoThere are decades of computer history telling users that they are never allowed to write a password done on paper or post-it notes. It's not a new "no true password" fallacy, it's a deep one in the history of computing. I think the fact that so many average users are scared to write their passwords down because of bad 1960s security advice is it's own indicator that passwords are broken that can be a long rant to itself. I don't know if WebAuthN is the answer either. I just know that passwords are broken.