3 ms·

I think it's just like in software in general: most software is bad, but it doesn't mean that all software is bad and unnecessary. Most security is done badly,

• coldpie 7mo ago
  > But I agree: TooBigTech has TooMuchPower. Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!
  • palata 7mo ago
    Or you spend 5 minutes reading about them and use a passkey you actually own? Many times, people choose TooBigTech. People are generally waaaay too lazy to even consider spending some brain cycles on that.
    • coldpie 7mo ago
      Unless the service you are trying to log in to requires you to only use an approved authenticator, as is explicitly supported by the spec[1]. [1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994182200 https://github.com/keepassxreboot/keepassxc/issues/10407#iss... More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-still-have-problems/#:~:text=It%27s%20Still%20Vendor%20Lockin https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...
      • palata 7mo ago
        Right, that sucks. But the service could also only allow you to use the Google SSO, it's not really a problem coming from the passkeys...