6 ms·
There is no need for passwords. Cant we figure out something better? its only been like 50 years.
by whoomp12342 5y ago
There is no need for passwords.
Cant we figure out something better? its only been like 50 years.
- awestroke 5y agoGo ahead and suggest an alternative
- rubyist5eva 5y agoOne-time use magic links sent to a verified email.
- OJFord 5y agoI hate that. (At least allow a password instead.)
- seanw444 5y agoYeah it's an obnoxious process. I don't know why people are so against passwords. Use a manager (or at least something like Lesspass), and then you're fine. Passwords aren't scary. They won't bite.
- manigandham 5y agoToo many extra steps, especially on mobile. And very suspectable to phishing and social engineering. Also makes it impossible to login if you lose email access (and what if you need to change your address because of it?)
- jandrese 5y agoYou just Chicken and Egged your email login.
- suifbwish 5y agoI am very curious why public private key auth is not a thing for websites and applications. I would rather have a single password to the server that publicly hosts my public key then I can simply point websites and applications to that address during signup. Every app/site would check the server every 5-20 mins for changes to my public key in case I need to change it. Then I can use my private key to authenticate to all these sites/apps instead of trying to keep track of 500 damn passwords.
- ReactiveJelly 5y agoBecause storage media can be shared and lost. If you're logging in from a library computer, you don't want the hassle of putting your privkey file on it and wiping it later. (Or connecting a USB drive, which may be a security hazard for the library) If you lose your computer, you still remember your password, but your only copy of your privkey may be lost. Losing hard drives is common for non-power users, because they don't do regular backups, and they often don't know that you can trivially recover files from, e.g. a laptop with a broken screen that won't boot. And computerized cell phones are actively trying to convince those non-power users that files don't even exist, to protect their profits.
- whoomp12342 5y agocloud/vaults for all
- thinkharderdev 5y agoI really hope that password managers are a step in this direction. Once they become ubiquitous then everyone effectively already has a "master password" for all their online identities. It wouldn't even really need to be a 3rd party service. The password managers could hold the keys locally and websites could just use WebAuthn for authentication.
- tialaramex 5y agoYour idea is basically "What if I was 100% trackable everywhere" which, if you're comfortable with that you're a rare exception - and if you didn't realise that was what you just proposed, well, now you know why we don't do that. Now, public key cryptography is indeed promising, but you see something rather more sophisticated to deliver privacy and security and that's what WebAuthn is.
- Zamicol 5y agoI agree. Public key authentication is mature. It just needs to be adopted. I'm not clear on the password part (I'm assuming it was a typo).
- 5y ago
- rabuse 5y agoEasy for someone to say shouting from the sidelines with no ideas themselves. "Somebody should do something about this!"
- kube-system 5y agoThis does exist: Passwordless with FIDO2/WebAuthn has been gaining some decent traction.
- tialaramex 5y agoWebAuthn can do full blown Usernameless, and it's very easy with devices like a modern iPhone or high-end Android. I have no idea why this wasn't immediately huge. You see the login button, you tap it, your existing fingerprint reader or whatever verifies you are still you, whoever that is, and you're logged in, done. Much more secure than people's crappy passwords, yet much easier to use even than the crappy passwords.