DJKJuicy@DJKJuicy@sh.itjust.works

Replying to @⁨lemmydividebyzero@reddthat.com⁩

There is still nothing better than passwords.

I don’t want my access to be tied to a specific device. Devices get lost, or break.

I don’t want someone to be able to use my face or finger or eyeball to access my data. You can legally be compelled to unlock a device with your biometric security.

So current biometric security sucks. And passkeys suck.

Also, though…passwords suck for all the reasons that we all already know.

There has to be some better method that the owner can have full agency over, I just don’t know what. I don’t have the answers.

firebarrage@firebarrage@lemmy.world

Replying to @⁨DJKJuicy@sh.itjust.works⁩

There’s a fantastic paper from a while ago that did a great job of covering what you’re getting at. It’s one of the most cited papers in password security research. Basically, everything we’ve ever found sucks but passwords seem to suck the least. Great read if you have the time - www.cl.cam.ac.uk/techreports/UCAM-CL-TR-817.pdf

en