posted in Technology
I don't like passkeys | Ethan Hawksley
hawksley.dev/blog/i-dont-like-passkeysposted in Technology
I don't like passkeys | Ethan Hawksley
hawksley.dev/blog/i-dont-like-passkeysReplying to @lemmydividebyzero@reddthat.com
Passkeys are worthless trash, invented explicitly to save Microsoft and Google money on password reset server time.
They do not solve session hijacking. Any attacker that has your granny on the phone to read them her password can also tell granny to go to a link and give them her session cookies.
Replying to @GreenShimada@lemmy.world
You think big tech did this to save… on … CPU costs of password resets?
This is actually really what you think?
Replying to @sunbeam60@feddit.uk
Not CPU costs, processing costs. Password resets are actually quite expensive. Microsoft and Google pushed the FIDO Alliance toward widespread use of a passwordless login credential because it benefited them. Google and MS get tens of millions of password resets a year. So if each one of those cost them $2 (some companies spend as much as $70 on each one if a human is involved), that’s literally tens of millions of dollars saved. Then you say “oh, for security” as the tie-in to not make it about your bottom line.
authx.com/…/how-much-does-a-password-reset-cost/ …jadaptive.com/the-true-cost-of-password-resets/ m365.fm/passwords-are-broken-passkeys-fix-everyth…