28 ms·

If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. They need to prove that this isn't going to be a bait and swit

If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. They need to prove that this isn't going to be a bait and switch. Give users 100% control over their pass keys NOW before we consider using the service. Otherwise, they're gonna play the "Oh, but most non-tech users will benifit from this" and then we get critical mass becuse a majority of users are non-tech users, and then the import/export function ends up being like the Official Linux Google Drive Client.

acdha 3y ago
> If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. No. You’d be screwed when all of your devices stopped working before you enrolled another passkey with the services you use, or setting up a password login if you’d never done that before. That wouldn’t be great but you’d be far more exposed earlier to the fact that you were using devices which no longer receive updates. The important thing to keep in mind here is context: people are getting compromised daily due to password weaknesses. People are going through account recovery processes for similar reasons, too, so a key question isn’t whether there’s a perfect option but rather how it’ll change those numbers.
- XorNot 3y ago
  This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery. That's the point: Google wants to collect your digital life and control it. But they also don't want to deal with any requirements to ensure you can actually use or recover it expediently. So it's not "if Google close up shop" it's "due to reasons we've (our AI decided too) ban your account. Don't bother contacting us, as there is no customer service".
  - acdha 3y ago
    > This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery No. Other people have posted incorrect claims but repetition doesn’t make them less wrong. If Google locks your account, you lose the ability to add new devices to that account but all of your current devices will still have their synced keys stored on their devices as well as the ability to use other passkeys, recovery codes, etc. If Google locks your account, this is nowhere near the biggest problem you’ll have.

acdha 3y ago

> If I use passkeys right now, with Google or Apple, and they close up shop tomorrow, I'm screwed. No. You’d be screwed when all of your devices stopped working before you enrolled another passkey with the services you use, or setting up a password login if you’d never done that before. That wouldn’t be great but you’d be far more exposed earlier to the fact that you were using devices which no longer receive updates. The important thing to keep in mind here is context: people are getting compromised daily due to password weaknesses. People are going through account recovery processes for similar reasons, too, so a key question isn’t whether there’s a perfect option but rather how it’ll change those numbers.

XorNot 3y ago
This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery. That's the point: Google wants to collect your digital life and control it. But they also don't want to deal with any requirements to ensure you can actually use or recover it expediently. So it's not "if Google close up shop" it's "due to reasons we've (our AI decided too) ban your account. Don't bother contacting us, as there is no customer service".
- acdha 3y ago
  > This is pretending that, as others have noted, Google haven't made a habit of locking out accounts for no reason and providing no path to recovery No. Other people have posted incorrect claims but repetition doesn’t make them less wrong. If Google locks your account, you lose the ability to add new devices to that account but all of your current devices will still have their synced keys stored on their devices as well as the ability to use other passkeys, recovery codes, etc. If Google locks your account, this is nowhere near the biggest problem you’ll have.