5 ms·
But if that "buddy account" is 'passworded' by the same passkey device? Getting a new sim card with the same number is easy, you just go to your mobile provide
by ajsnigrutin 2y ago
But if that "buddy account" is 'passworded' by the same passkey device?
Getting a new sim card with the same number is easy, you just go to your mobile provider with your ID card, and you're done in five minutes.
I mean still... the article mentions a "single point of failure" as a bad thing with other methods, but forgets about it here.
- throwaway31338 2y agoUntil the passkey workflow goes sideways for "tech" people I don't think the risks will be acknowledged (if then even). Those of us who don't want the let Google, Apple, or Microsoft manage our passkeys (i.e. pledging our fealty to our lords) will be seen as fringe lunatics. I'll keep my workflow of always visiting sites by typing the URL myself, using a password manager, and TOTP 2FA w/ the secrets saved offline on paper. At least until I'm not allowed to do that anymore.
- reddec 2y agoLuckily Bitwarden supports passkeys. And you can self host it. And even vaultwarden/bitwarden-rs supports passkeys
- Nathanba 2y agoSame here, I don't like passkeys for many reasons. Another reason is that I can't see the key that I'm using. Therefore: What if Bitwarden doesn't pick up the passkey? Tough luck, I'm out of options. I cannot manually create a passkey entry in Bitwarden because it's all hidden magic. If I notice that the password manager doesn't pick up a registration then I just add it myself. Not possible with passkeys.
- precommunicator 2y agoEasy if you're in the same country as the provider. Not so easy if you're on the other side of the planet.
- aianus 2y agoGetting a SIM card is too easy, many millions have been lost to sim-jacking.
- ajsnigrutin 2y agoIn most countries, not really. Some countries have problems with people and IDs, like US, so that's a different story.