3 ms·
"Dang, this site isn't working right with the password manager's detection. Guess I just gotta paste the password in again..." Meanwhile U2F/Passkeys can't pos
by vel0city 4mo ago
"Dang, this site isn't working right with the password manager's detection. Guess I just gotta paste the password in again..."
Meanwhile U2F/Passkeys can't possibly be abused like this.
- tjoff 4mo agoYeah but the downsides of passkeys make them so much worse anyway.
- jcattle 4mo agoPretty happy with having a yubikey on my keychain. Log in someplace new? plonk in your yubikey and off you go!
- someguyiguess 4mo agoAnd when your keychain gets lost then what?
- brendoelfrendo 4mo agoI open the safe where I keep my spare Yubikey. Or I use the passkey stored in my phone, or the one on my laptop. Make passkeys, put them everywhere.
- jcattle 4mo agoThen I have a backup yubikey at home for services which allow to register two keys. For other's there's still good old password+some second factor.
- vel0city 4mo agoThen I use the authenticator built into my phone. Or the authenticator built into my desktop. Or the authenticator built into my laptop. Or my other authenticator. My phone was destroyed not too long ago. I had been using it for passkeys. Oh no, all those passkeys were gone. No problem, when I got my new phone I just used the authenticator on my keyring to get back into my accounts. If my keyring authenticator got lost I'd just buy a new authenticator eventually and add it to my accounts.
- LtWorf 4mo agohttps://xkcd.com/981/ https://xkcd.com/981/
- AlotOfReading 4mo agoI used to keep a yubikey in a spare slot on my laptop. One day it fell out and subsequently escaped through an unnoticed hole in my backpack. I've never lost a password because my backpack was overly abused.
- brendoelfrendo 4mo agoThat's why you keep it on your keychain and not in a spare slot on your laptop.
- AlotOfReading 4mo agoIt's not possible to put a 5c nano on a keychain. They're intended to be kept in the slot at all times.
- deleted 4mo ago[deleted]
- iknowstuff 4mo agoPasskeys are great. Store them in your password manager and what downsides are you referring to
- bonoboTP 4mo agoExactly. All these ideals work in theory but then in reality banks are also incompetent and will use all kinds of domains. Same with meta and Google where they often direct you to domains that aren't under their main one and it's actually legit, but there's no way to know. It's impossible to teach family members to pay attention if it's really that domain because it's often legit not that domain.
- weird-eye-issue 4mo agoWell mine pops up a big warning if you try pasting when the domain doesn't match it so at least it would force you to take a second look. Also all the real world services that I use half past keys as 2fa which I also store in the password manager