4 ms·
> Why would BigTech care about the dozens of users using an open source password manager? Bots using a custom password manager to share logins.
by withinboredom 1y ago
> Why would BigTech care about the dozens of users using an open source password manager?
Bots using a custom password manager to share logins.
- tux3 1y agoIf all you want is to make a bot that can use passkeys automatically, add a transistor between your Yubikey's touch button and GND. When you turn the transistor on, the capacitive sensor is activated. Now the Yubikey is just an API you can call, websites cannot tell the difference. You can't export keys, but a bot can add new keys after using existing keys to log in.
- withinboredom 1y agothis doesn't work on stolen aws accounts though /s
- jrockway 1y agoYou can proxy all the underlying USB communications to a physical device. Allowing attestation in the spec was not an anti-bot measure.