It’s something you pass around–like a word, but a key instead. If you’re familiar with passwords–instead of a word–imagine a key: a passkey. That’s what passkeys are. The issue with passkeys is–as you pass them around they begin to open more and more stuff; everyone is opening stuff with your key as it’s passed. So they need to be sanitized every now and then. Deposit them into a furnace and buy a new passkey. Every two to three days. If you have more questions please feel free to ask!
Okay. I think I’m understanding. A passkey is a virtual key? That we have to buy? And some company makes these virtual keys? And there’s a virtual locksmith who makes virtual locks? And you have to hire them to install them on your computer? Is this what’s going on?
I apologize. The reply you responded to was entirely satirical. It was written in frustration. From my point of view passkeys are the way to do authentication. More specifically public-key cryptography. It has a lot of desirable qualities. Governments and ‘tech platforms’ should have been using it from the start–we’ve had the software to do this since the 1980s and it was libre-software by the 1990s.
Any criticism of passkeys (as brought up in this thread) are more so applicable to the private-dictatorships that are Microsoft, Apple and Google. The contrary behavior of continuing to use these private-dictatorships whilst decrying passkeys is tantamount to hypocrisy? stupidity? To give a tiny bit of context: the quality of attestation in passkeys are also applicable to SSL-certificates, yet no one is decrying SSL-certificates. It’s also applicable to every GNU/Linux distribution and libre-software at large.
That’s to say the criticism is written from a place of ignorance. “Privacy” forums on the internet are not interested in reality. Their users are full of users with static behaviors. More often than not any questions asked in these places amount to “how can I continue doing what I was doing before? Big-corp has introduced a change I don’t like. I want to do the exact same thing on big-corp that was previously permissible.” When the factual observation is stated: “big-corp is a corporation designed for surveillance-capitalism therefore if you desire liberty and privacy whilst computing you cannot use such a corporation in any manner” it’s met with unfounded hostility, hypocrisy and lies. Any use of such software is contrary to your stated desire: digital-privacy. Even when responses illustrate how you could achieve what the OP wanted, but with libre-software and privacy-preserving-software you’re often met with: “no. I want to use Google/Microsoft/et al.” Users are lazy idiots.
Technical and correct responses are ignored whilst a flood of ignorant, emotional or status-quo enforcing responses are brought to magnified attention. I’ve abandoned restraint and started to shitpost as every one else appears to be doing.
I suppose this is all a criticism of ‘social-media’ and how it’s a waste of everyone’s time.
That’s to say the criticism is written from a place of ignorance.
The praise is also written from a place of ignorance too. People love it and they don’t know what it is. If you can’t explain it to a five year old, then you don’t understand it. And if we don’t understand, it’s a horrible idea to fork over our security to it. We don’t want to rely on a box full of ADE 651 bomb detectors.
There. You’ve solved 90% of online fraud that begins with website(s) leaking your credentials and someone combining leaks to gain access to everything in your life via your email (including bank, socials, porn habits, whatever).
So… Uh… What’s a passkey? The article is saying they’re pure evil. Everyone here is saying they’re good. Everyone knows what they are except for me.
What’s the difference between a passkey and a password?
It’s something you pass around–like a word, but a key instead. If you’re familiar with passwords–instead of a word–imagine a key: a passkey. That’s what passkeys are. The issue with passkeys is–as you pass them around they begin to open more and more stuff; everyone is opening stuff with your key as it’s passed. So they need to be sanitized every now and then. Deposit them into a furnace and buy a new passkey. Every two to three days. If you have more questions please feel free to ask!
Okay. I think I’m understanding. A passkey is a virtual key? That we have to buy? And some company makes these virtual keys? And there’s a virtual locksmith who makes virtual locks? And you have to hire them to install them on your computer? Is this what’s going on?
I apologize. The reply you responded to was entirely satirical. It was written in frustration. From my point of view passkeys are the way to do authentication. More specifically public-key cryptography. It has a lot of desirable qualities. Governments and ‘tech platforms’ should have been using it from the start–we’ve had the software to do this since the 1980s and it was libre-software by the 1990s.
Any criticism of passkeys (as brought up in this thread) are more so applicable to the private-dictatorships that are Microsoft, Apple and Google. The contrary behavior of continuing to use these private-dictatorships whilst decrying passkeys is tantamount to hypocrisy? stupidity? To give a tiny bit of context: the quality of attestation in passkeys are also applicable to SSL-certificates, yet no one is decrying SSL-certificates. It’s also applicable to every GNU/Linux distribution and libre-software at large.
That’s to say the criticism is written from a place of ignorance. “Privacy” forums on the internet are not interested in reality. Their users are full of users with static behaviors. More often than not any questions asked in these places amount to “how can I continue doing what I was doing before? Big-corp has introduced a change I don’t like. I want to do the exact same thing on big-corp that was previously permissible.” When the factual observation is stated: “big-corp is a corporation designed for surveillance-capitalism therefore if you desire liberty and privacy whilst computing you cannot use such a corporation in any manner” it’s met with unfounded hostility, hypocrisy and lies. Any use of such software is contrary to your stated desire: digital-privacy. Even when responses illustrate how you could achieve what the OP wanted, but with libre-software and privacy-preserving-software you’re often met with: “no. I want to use Google/Microsoft/et al.” Users are lazy idiots.
Technical and correct responses are ignored whilst a flood of ignorant, emotional or status-quo enforcing responses are brought to magnified attention. I’ve abandoned restraint and started to shitpost as every one else appears to be doing.
I suppose this is all a criticism of ‘social-media’ and how it’s a waste of everyone’s time.
The praise is also written from a place of ignorance too. People love it and they don’t know what it is. If you can’t explain it to a five year old, then you don’t understand it. And if we don’t understand, it’s a horrible idea to fork over our security to it. We don’t want to rely on a box full of ADE 651 bomb detectors.
You’re an idiot.
Are you serious?
https://www.yubico.com/resources/glossary/what-is-a-passkey/
Sounds like a turbo encabulator.
Also, that website is full of sand traps. Every time I accidentally mouse over something, a huge menu covers up the definition.
As the article states, they’re an extremely malicious solution to a problem that has better, simpler, and easier to understand solutions.
It’s also a very good solution to the “problem” of users being able to do things our corporate overlords don’t want us to do.
In short, they’re even worse malware than the ones they’re sold as protecting us from.
Enshittification manifest.
Can you give an example?
Amazon/whatever login:
Email login:
There. You’ve solved 90% of online fraud that begins with website(s) leaking your credentials and someone combining leaks to gain access to everything in your life via your email (including bank, socials, porn habits, whatever).
How do you suggest enforcing it?