3 ms·

Passkeys make no sense. Its selling you something you already own, since a fingerprint or a retina scan makes a fine good two factor as well.

by asdff 3y ago

microtonal 3y ago
Someone gains access to a Passkey. You generate a new Passkey and replace the registered Passkey for the server. Someone gains access to your fingerprints or retina scan... Game over?
- asdff 3y ago
  Someone gains access to your passkey once, they can probably do it again I'm thinking.
wongarsu 3y ago
In 2014 the fingerprints of Angela Merkel and the German Defense Minister were "cloned" by taking high resolution pictures at a press conference. Against targeted attacks, using something that's readily visible on your person isn't the best idea.
- wkat4242 3y ago
  Yeah or that you leave impressions of thousands of times a day :) It's good as an extra factor but not as authentication by itself.
Nadya 3y ago
What's your game plan for replacing your retina or fingerprints if compromised? Biodata is the least secure because it can't be easily changed and the technology already exists to compromise them.
- secabeen 3y ago
  Compromise isn't even the most common issue, it's your incapacity or death. Your relatives need some way to get into your accounts when you can't.
  - asdff 3y ago
    You can go, "here is the passkey to get into all my accounts" which would imply they don't lose the key and its not stolen. Or you can register their bio metrics into your whitelist and not have to deal with that.
rcxdude 3y ago
biometrics aren't passwords. They are only somewhat useful as authentication if you can verify that they are attached to the person you are authenticating, which generally only works in person.
- asdff 3y ago
  True for passkeys no?
pndy 3y ago
> since a fingerprint or a retina scan makes a fine good two factor as well Last year I was making new IDs for myself and my mother which in the newest version require fingerprints being provided beside the biometric photo. The office clerk lady who served us had a real struggle with taking scans of our fingerprints. Our skin was damaged due to low temperature and extensive use of alcohol-based sanitizing gel because of the current situation back then. She gave us vaseline cream so this would go a little bit easier but no luck - each of us spent around 10 minutes scanning each finger till it got finally digitalized. The scanner used could a really cheap one and thus blamed for prolonging this whole scanning process or it was our skin condition or both these things. Whether it was, by this experience even if episodic one, I don't think that fingerprints are "a fine two factor". As for eyes: it's really unlikely it might happen to many people but eyes can be damaged and there are eye diseases that might affect verification. Not mention post-procedures treatment that excludes use of this scan technique for some time.

Passkeys make no sense. Its selling you something you already own, since a fingerprint or a retina scan makes a fine good two factor as well.

by asdff 3y ago

Passkeys make no sense. Its selling you something you already own, since a fingerprint or a retina scan makes a fine good two factor as well.

microtonal 3y ago

Someone gains access to a Passkey. You generate a new Passkey and replace the registered Passkey for the server. Someone gains access to your fingerprints or retina scan... Game over?

asdff 3y ago
Someone gains access to your passkey once, they can probably do it again I'm thinking.

wongarsu 3y ago

In 2014 the fingerprints of Angela Merkel and the German Defense Minister were "cloned" by taking high resolution pictures at a press conference. Against targeted attacks, using something that's readily visible on your person isn't the best idea.

wkat4242 3y ago
Yeah or that you leave impressions of thousands of times a day :) It's good as an extra factor but not as authentication by itself.

Nadya 3y ago

What's your game plan for replacing your retina or fingerprints if compromised? Biodata is the least secure because it can't be easily changed and the technology already exists to compromise them.

secabeen 3y ago
Compromise isn't even the most common issue, it's your incapacity or death. Your relatives need some way to get into your accounts when you can't.
- asdff 3y ago
  You can go, "here is the passkey to get into all my accounts" which would imply they don't lose the key and its not stolen. Or you can register their bio metrics into your whitelist and not have to deal with that.

rcxdude 3y ago

biometrics aren't passwords. They are only somewhat useful as authentication if you can verify that they are attached to the person you are authenticating, which generally only works in person.

asdff 3y ago
True for passkeys no?

pndy 3y ago

> since a fingerprint or a retina scan makes a fine good two factor as well Last year I was making new IDs for myself and my mother which in the newest version require fingerprints being provided beside the biometric photo. The office clerk lady who served us had a real struggle with taking scans of our fingerprints. Our skin was damaged due to low temperature and extensive use of alcohol-based sanitizing gel because of the current situation back then. She gave us vaseline cream so this would go a little bit easier but no luck - each of us spent around 10 minutes scanning each finger till it got finally digitalized. The scanner used could a really cheap one and thus blamed for prolonging this whole scanning process or it was our skin condition or both these things. Whether it was, by this experience even if episodic one, I don't think that fingerprints are "a fine two factor". As for eyes: it's really unlikely it might happen to many people but eyes can be damaged and there are eye diseases that might affect verification. Not mention post-procedures treatment that excludes use of this scan technique for some time.