posted in Technology
I don't like passkeys | Ethan Hawksley
hawksley.dev/blog/i-dont-like-passkeysReplying to @lemmydividebyzero@reddthat.com
Passkeys are worthless trash, invented explicitly to save Microsoft and Google money on password reset server time.
They do not solve session hijacking. Any attacker that has your granny on the phone to read them her password can also tell granny to go to a link and give them her session cookies.
Replying to @GreenShimada@lemmy.world
That’s what CSRF mitigations are for.
Do you actually understand how any of the modern web works or does your knowledge stop at W3Schools tutorials from the mid-2000s?
Replying to @Technus@lemmy.zip
No, sorry, I’m a network vegan. I only eat things that are grown at Layer 1. My packets are whole-grain and processed by hand. carried by pigeons. IP by Bird is how I surf the web, dude!