5 ms·

it is your key, it lives on your device (and is synced across devices using your cloud account if you so choose)

webmobdev 4y ago
And BigTech's cloud (who will have no problem sharing it with the authorities). And when all your keys are on the device, it also becomes a lot easier for the government to access all your internet accounts by getting access to the device.
- jackson1442 4y ago
  They're end-to-end encrypted. Did you read the article? This is the same threat model as password managers, which are generally approved of on HN.
  - jrm4 4y ago
    Yeah, I think HN is mostly wrong about those as well. :)
  - tjoff 4y ago
    You can backup your password manager. You don't have to depend on the cloud for your password manager.
  - webmobdev 4y ago
    Who cares if it is "end-to-end encrypted" if the device with all your keys / credentials can be easily used to access all your online accounts? (And no online service forces me to use a password manager).
jrm4 4y ago
It's a nanny-ish third-party in the middle. That increases convenience, but also greatly increases your threat surface.
- mtlmtlmtlmtl 4y ago
  A nanny-ish third party, as opposed to Coinbase, Binance, et al?
  - jrm4 4y ago
    No, those are the same thing. The "not your keys" thing in crypto is exactly the reason they tell you NOT to store your crypto with e.g. Coinbase/Binance. Just use them as on/off ramps, but have your own wallet.
- jackson1442 4y ago
  Is it nanny-ish just because it makes it simpler for end users? Fairly certain most users are not interested in managing their own key sharing infrastructure. It's built on the same technology as FIDO keys, so if you want to take control of it yourself, just use a hardware key.
  - jrm4 4y ago
    Exactly. Now, why are they doing it for free? Why take on a huge responsibility for no money, what do they get out of it?
    - Scion9066 4y ago
      If people use this instead of passwords, they get less compromised accounts on their services that they have to deal with.
    - ThatPlayer 4y ago
      Less customer support for dealing with hacked accounts. Same reason places support and even push 2FA, otherwise what is their incentive to support 2FA? Fortnite even has a free dance that you can only get by enabling 2FA.
- joshuamorton 4y ago
  Be precise: what threat is added here that is added by a third party holding encrypted keys? Like this isn't particularly different from me backing up my (encrypted) disk which contains my (further encrypted) keys to the cloud somewhere.

And BigTech's cloud (who will have no problem sharing it with the authorities). And when all your keys are on the device, it also becomes a lot easier for the government to access all your internet accounts by getting access to the device.

jackson1442 4y ago
They're end-to-end encrypted. Did you read the article? This is the same threat model as password managers, which are generally approved of on HN.
- jrm4 4y ago
  Yeah, I think HN is mostly wrong about those as well. :)
- tjoff 4y ago
  You can backup your password manager. You don't have to depend on the cloud for your password manager.
- webmobdev 4y ago
  Who cares if it is "end-to-end encrypted" if the device with all your keys / credentials can be easily used to access all your online accounts? (And no online service forces me to use a password manager).

jrm4 4y ago

It's a nanny-ish third-party in the middle. That increases convenience, but also greatly increases your threat surface.

mtlmtlmtlmtl 4y ago
A nanny-ish third party, as opposed to Coinbase, Binance, et al?
- jrm4 4y ago
  No, those are the same thing. The "not your keys" thing in crypto is exactly the reason they tell you NOT to store your crypto with e.g. Coinbase/Binance. Just use them as on/off ramps, but have your own wallet.
jackson1442 4y ago
Is it nanny-ish just because it makes it simpler for end users? Fairly certain most users are not interested in managing their own key sharing infrastructure. It's built on the same technology as FIDO keys, so if you want to take control of it yourself, just use a hardware key.
- jrm4 4y ago
  Exactly. Now, why are they doing it for free? Why take on a huge responsibility for no money, what do they get out of it?
  - Scion9066 4y ago
    If people use this instead of passwords, they get less compromised accounts on their services that they have to deal with.
  - ThatPlayer 4y ago
    Less customer support for dealing with hacked accounts. Same reason places support and even push 2FA, otherwise what is their incentive to support 2FA? Fortnite even has a free dance that you can only get by enabling 2FA.
joshuamorton 4y ago
Be precise: what threat is added here that is added by a third party holding encrypted keys? Like this isn't particularly different from me backing up my (encrypted) disk which contains my (further encrypted) keys to the cloud somewhere.