5 ms·

That just means avoid making passkeys and/or Google passkeys your only login option. There are other options out there.

by josteink 3y ago

XorNot 3y ago
Google's stated goal of killing the password though gives the game away. They want to give you no other option.
- acdha 3y ago
  You really want to learn how this technology works before spreading FUD which will cause people to pick less secure options. Passkeys are a W3C standard and they’re not an SSO system which requires a third-party server to function. If Google closed operations tomorrow, it wouldn’t affect anyone using a passkey to login to any service other than Google’s own.
  - deleted 3y ago
    [deleted]
  - Aeolun 3y ago
    Unless you are storing all your passkeys on a Google server, as Apple seems to require ATM (see article).
  - jasonjayr 3y ago
    If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. They need to prove that this isn't going to be a bait and switch. Give users 100% control over their pass keys NOW before we consider using the service. Otherwise, they're gonna play the "Oh, but most non-tech users will benifit from this" and then we get critical mass becuse a majority of users are non-tech users, and then the import/export function ends up being like the Official Linux Google Drive Client.
    - acdha 3y ago
      > If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. No. You’d be screwed when all of your devices stopped working before you enrolled another passkey with the services you use, or setting up a password login if you’d never done that before. That wouldn’t be great but you’d be far more exposed earlier to the fact that you were using devices which no longer receive updates. The important thing to keep in mind here is context: people are getting compromised daily due to password weaknesses. People are going through account recovery processes for similar reasons, too, so a key question isn’t whether there’s a perfect option but rather how it’ll change those numbers.
      - XorNot 3y ago
        This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery. That's the point: Google wants to collect your digital life and control it. But they also don't want to deal with any requirements to ensure you can actually use or recover it expediently. So it's not "if Google close up shop" it's "due to reasons we've (our AI decided too) ban your account. Don't bother contacting us, as there is no customer service".
        acdha 3y ago
        > This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery No. Other people have posted incorrect claims but repetition doesn’t make them less wrong. If Google locks your account, you lose the ability to add new devices to that account but all of your current devices will still have their synced keys stored on their devices as well as the ability to use other passkeys, recovery codes, etc. If Google locks your account, this is nowhere near the biggest problem you’ll have.

That just means avoid making passkeys and/or Google passkeys your only login option. There are other options out there.

XorNot 3y ago

Google's stated goal of killing the password though gives the game away. They want to give you no other option.

acdha 3y ago
You really want to learn how this technology works before spreading FUD which will cause people to pick less secure options. Passkeys are a W3C standard and they’re not an SSO system which requires a third-party server to function. If Google closed operations tomorrow, it wouldn’t affect anyone using a passkey to login to any service other than Google’s own.
- deleted 3y ago
  [deleted]
- Aeolun 3y ago
  Unless you are storing all your passkeys on a Google server, as Apple seems to require ATM (see article).
- jasonjayr 3y ago
  If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. They need to prove that this isn't going to be a bait and switch. Give users 100% control over their pass keys NOW before we consider using the service. Otherwise, they're gonna play the "Oh, but most non-tech users will benifit from this" and then we get critical mass becuse a majority of users are non-tech users, and then the import/export function ends up being like the Official Linux Google Drive Client.
  - acdha 3y ago
    > If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. No. You’d be screwed when all of your devices stopped working before you enrolled another passkey with the services you use, or setting up a password login if you’d never done that before. That wouldn’t be great but you’d be far more exposed earlier to the fact that you were using devices which no longer receive updates. The important thing to keep in mind here is context: people are getting compromised daily due to password weaknesses. People are going through account recovery processes for similar reasons, too, so a key question isn’t whether there’s a perfect option but rather how it’ll change those numbers.
    - XorNot 3y ago
      This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery. That's the point: Google wants to collect your digital life and control it. But they also don't want to deal with any requirements to ensure you can actually use or recover it expediently. So it's not "if Google close up shop" it's "due to reasons we've (our AI decided too) ban your account. Don't bother contacting us, as there is no customer service".
      - acdha 3y ago
        > This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery No. Other people have posted incorrect claims but repetition doesn’t make them less wrong. If Google locks your account, you lose the ability to add new devices to that account but all of your current devices will still have their synced keys stored on their devices as well as the ability to use other passkeys, recovery codes, etc. If Google locks your account, this is nowhere near the biggest problem you’ll have.