5 ms·

> Another big challenge with establishing consistency and continuity will be the long transition to passkeys alone. If I wanted passwordless login, why wouldn'

> Another big challenge with establishing consistency and continuity will be the long transition to passkeys alone. If I wanted passwordless login, why wouldn't I just hit the big 'sign in with facebook' button practically every website has these days?

vuryleo 4y ago
and login facebook w/ password
izacus 4y ago
Because passkey is owned by you (as in - whichever software vault you're using) and not Facebook. It's no different than stored random 32 character passwords in a password manager... it's pretty much the same really, just that you don't have to copy/paste it in a form.
- KyeRussell 4y ago
  I think that this question is being posed from the perspective of a civilian.
  - izacus 4y ago
    What's a "civilian" in your context?
    - Am4TIfIsER0ppos 4y ago
      Probably: a normie, a layman, the ignorant masses who should never have been given a computer.
- swiftcoder 4y ago
  > whichever software vault you're using Do consumers perceive a significant difference between "login with Facebook" and "login with LastPass"? In both cases I'm delegating my security credentials to a cloud service I have limitted influence over.
  - postalrat 4y ago
    Passkeys don't require any cloud provider.
    - swiftcoder 4y ago
      In theory, no, but in practice if I don't have a cloud provider backing up my passkeys, I'm just going to lose them all next time my phone/computer dies (same problem as with local-only 2fac code generators today).
    - edgyquant 4y ago
      [flagged]
- SheinhardtWigCo 4y ago
  It's more like a 1000 character password that can only be extracted or transferred to other devices via methods provided by the developer of the software vault. The purpose is lock-in, not security.
ssss11 4y ago
If you like Facebook tracking everything you do, and the data breach risk associated with their copy of your entire online life, then go for it.
coldtea 4y ago
Wouldn't that give somebody having access to your FB account access to every website you used FB login for? At minimum you'd still need 2FA with that to avoid this.
- nly 4y ago
  It also gives Facebook themselves access to every service you can 'Login with Facebook' with
iopq 4y ago
Or was it sign in with Google? No, on this website I signed up with Github. I think?
jeroenhd 4y ago
I deleted my Facebook account. I lost access to several accounts that way, luckily none of them were important. At least this time I chose to close my account. Next time it can be Facebook/Google/Microsoft/Twitter/Apple who decide that you're a robot/fraud/whatever after receiving a bunch of automated reports. If Google ever bans me, I'm screwed in many different yet interesting ways.
- AlexandrB 4y ago
  What's really scary is how account access can be lost in retaliation for exercising your rights as a customer (e.g. chargebacks, "too many" returns, lawsuits, etc). As FAANG expand into more parts of our lives there are more and more things you're legally allowed to do but shouldn't do if you want to maintain access to all your shit. The TOSs of these vendors can become a de-facto legal regime that limits your rights in new and exciting ways.

vuryleo 4y ago

and login facebook w/ password

izacus 4y ago

Because passkey is owned by you (as in - whichever software vault you're using) and not Facebook. It's no different than stored random 32 character passwords in a password manager... it's pretty much the same really, just that you don't have to copy/paste it in a form.

KyeRussell 4y ago
I think that this question is being posed from the perspective of a civilian.
- izacus 4y ago
  What's a "civilian" in your context?
  - Am4TIfIsER0ppos 4y ago
    Probably: a normie, a layman, the ignorant masses who should never have been given a computer.
swiftcoder 4y ago
> whichever software vault you're using Do consumers perceive a significant difference between "login with Facebook" and "login with LastPass"? In both cases I'm delegating my security credentials to a cloud service I have limitted influence over.
- postalrat 4y ago
  Passkeys don't require any cloud provider.
  - swiftcoder 4y ago
    In theory, no, but in practice if I don't have a cloud provider backing up my passkeys, I'm just going to lose them all next time my phone/computer dies (same problem as with local-only 2fac code generators today).
  - edgyquant 4y ago
    [flagged]
SheinhardtWigCo 4y ago
It's more like a 1000 character password that can only be extracted or transferred to other devices via methods provided by the developer of the software vault. The purpose is lock-in, not security.

ssss11 4y ago

If you like Facebook tracking everything you do, and the data breach risk associated with their copy of your entire online life, then go for it.

coldtea 4y ago

Wouldn't that give somebody having access to your FB account access to every website you used FB login for? At minimum you'd still need 2FA with that to avoid this.

nly 4y ago
It also gives Facebook themselves access to every service you can 'Login with Facebook' with

iopq 4y ago

Or was it sign in with Google? No, on this website I signed up with Github. I think?

jeroenhd 4y ago

I deleted my Facebook account. I lost access to several accounts that way, luckily none of them were important. At least this time I chose to close my account. Next time it can be Facebook/Google/Microsoft/Twitter/Apple who decide that you're a robot/fraud/whatever after receiving a bunch of automated reports. If Google ever bans me, I'm screwed in many different yet interesting ways.

AlexandrB 4y ago
What's really scary is how account access can be lost in retaliation for exercising your rights as a customer (e.g. chargebacks, "too many" returns, lawsuits, etc). As FAANG expand into more parts of our lives there are more and more things you're legally allowed to do but shouldn't do if you want to maintain access to all your shit. The TOSs of these vendors can become a de-facto legal regime that limits your rights in new and exciting ways.