4 ms·
I just bought a passkey... It's a USB device, completely separate from any big conglomerates.
by apexalpha 2mo ago
I just bought a passkey... It's a USB device, completely separate from any big conglomerates.
- reddalo 2mo agoBut then you need to phisically carry it along with you everywhere you go, if you want to log into a service :/
- apexalpha 2mo agoYes, it’s like a key. :) Though realistically I use a passkey for services I care about and a password manager for the rest.
- eikenberry 2mo agoKeys can be copied very easily. It’s one of their primary features. Can you easily copy your USB key?
- jazzyjackson 2mo agoYubikeys are Secure Enclaves designed to not be copyable
- eikenberry 2mo agoRight. That's the flaw I was pointing out.
- krupan 2mo agoPhysical keys can easily be copied, and physical locks can easily be picked. That might be fine for your house or storage unit, but for your bank account or your car (newer cars no longer have simple physical keys/locks), we've moved beyond that tech.
- mrguyorama 2mo agoThat any and all physical security measures can be defeated is a feature, not a bug. Almost no human beings actually need that level of security, and the tradeoffs are absolutely not worth it for those of us without Mossad as a threat. How often do people lock themselves out of their own house? Don't you know anyone with ADHD? Imagine any time that happens it is mathematically verifiably permanent as a fact of reality itself. It doesn't matter that the state still views you as the legal owner, you are never allowed in ever again.
- krupan 2mo agoNo web service is like that. They all offer recovery options. We aren't talking about Bitcoin here.
- EvanAnderson 2mo agoThe trend of companies becoming easier to contact and customer service becoming better is well-documented.
- Telaneo 2mo agoTell that to the people who have lost access to their Google account.
- apexalpha 2mo agoYou can 'copy' it by registering a new one to the service.
- SoftTalker 2mo agoAnd hope you don't lose it, or leave it in a pocket when you do the laundry, or plug it into a faulty USB port that zaps it, etc.
- vel0city 2mo agoMy yubikeys have survived dips in the ocean, spilled beers, run over by cars, dropped in pans of used motor oil, left out in thunderstorms, and multiple trips through the washer and dryer. They're still fine even after a decade.
- hnfong 2mo agoNothing survives the xkcd 538 wrench attack.
- finaard 2mo agoThat's not the problem for me - I carry a bunch of tokens with me anyway (all my banking stuff is on hardware tokens, for example). My problem is more: My browsers run in containers or VMs, intentionally without hardware access. Getting passkeys to work there would be quite a bit of effort.