mcstempel

10 ms·

1. 31.▲
   by mcstempel 4y ago

   100%. The common thread in all of these recent attacks (Uber, Twilio, Okta, etc) is the “phishability” of the authentication methods involved -- as you mention, the unphishability of WebAuthn is what makes it particularly compelling. What’s
2. 32.▲
   by mcstempel 4y ago

   The common thread in all of these recent attacks (Uber, Twilio, Okta, etc) is the “phishability” of the authentication methods involved. Remote attacks like this only work when you can socially engineer an employee and phish sensitive crede
3. 33.▲
   by mcstempel 4y ago

   Hey there, this is actually a fully non-custodial, multi-chain wallet. We use some familiar Web2 patterns to derive the private key for the user, but it's fully non-custodial and never touches a remote server. Here's some more inf