Passkey is some sort of specific unique key to a device allowing to use a pin on a device instead of the password. But which won’t work on another device.

Now I don’t know if that key can be stolen or not, or if it’s really more secure or not, as people have really unsecure pins.

  • alvvayson@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    10
    ·
    1 year ago

    If they want to be a Boomer and stick to 20th century solutions, why should I care?

    If it works for them, fine. Nothing wrong with that.

    It’s obviously not working for most people. Most people reuse weak passwords and get their passwords hacked. Passkeys solve that for those users.

    That’s why the whole industry is shifting to passkeys.

    • Kusimulkku@lemm.ee
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      1 year ago

      “It’s old so it’s bad” is not a very convincing argument.

      I think he was wondering how technically the new solution is better, especially compared to password database solutions where complex password and password reuse isn’t an issue.

      • Natanael@slrpnk.net
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Webauthn has domain bindings and single use challenges which prevents MITM credential stealing, etc

      • alvvayson@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        8
        ·
        1 year ago

        I said the exact opposite. If the old thing works for you, go ahead and stay on it, but don’t complain about the rest of the world improving and moving forward.

        Why put quotes when you are misquoting…

        And I answered him, he just doesn’t want to know. I can’t solve that.

        • Kusimulkku@lemm.ee
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          2
          ·
          1 year ago

          You’re mentioning how it’s an old solution as if that was some sort of argument. If you’re not using it as an argument then it seems kinda pointless to bring it up.

          I said the exact opposite. If the old thing works for you, go ahead and stay on it, but don’t complain about the rest of the world improving and moving forward.

          I’m not sure if you even realize you’re doing it but you’re doing it again, implying that it’s better because it’s newer. That’s not a very solid argument.

          And I answered him, he just doesn’t want to know. I can’t solve that.

          I know you’ve mentioned some aspects but I’m still wondering, in your opinion, what would be the technical reason that the password database model with long and complicated passwords would be worse than the passkey setup. Or is it that they’re as good but passkey might be a lot simpler to some folk?

          • alvvayson@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            4
            ·
            1 year ago

            Sorry, your arguing against some strawman here.

            Keep using passwords if that’s your preferred solution.

            Not my beef if you can’t see how MFA is stronger than something that can be copy-pasted in a MITM attack.

            • Kusimulkku@lemm.ee
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              2
              ·
              1 year ago

              Would be a lot easier to see it if you tried to actually explain your position tbh

              • alvvayson@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                4
                ·
                1 year ago

                I did.

                Passkeys = open standard, more secure by design, multi-factor.

                Passwords = bad track record, easily compromised.

                Can’t dumb it down much more than that chief.

                • Kusimulkku@lemm.ee
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  arrow-down
                  2
                  ·
                  1 year ago

                  Password databases can have MFA too. Passkeys by default (on Google’s implementation) seem to rely on just the device pin.

                  Passkeys = open standard

                  That’s not really something they have over passwords lol.

                  Passwords = bad track record, easily compromised.

                  I mean passkeys are so new thet don’t have a track record. So hard to compare on those merits. What do you mean easily compromised, exactly? Compared to password database model.

                  Can’t dumb it down much more than that chief.

                  You clearly lack imagination. Passkey = more secure password less secure is much more dumbed down.

                  But I didn’t want you to dumb it down, I wanted you to expand on what you said and be more specific and technical. How are you still not getting what people’s gripe with your comments is lol

                  • alvvayson@lemmy.world
                    link
                    fedilink
                    English
                    arrow-up
                    2
                    arrow-down
                    6
                    ·
                    1 year ago

                    People are down voting because they have issues and I don’t have the patience to entertain them.

                    Fuck it, keep using passwords, don’t get vaccines and don’t drink fluoridated water.

                    I don’t give a shit.

    • wildginger@lemmy.myserv.one
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      It kinda sounds like you dont actually know whats wrong, and are just blindly following the trends.

      Doesnt that make you the boomer?