#passwordless

First up in the session was Lee et al.'s "False Promises of Passwordless: Defeating Windows Hello through TPM Misuses" exposing practical attacks that bypass #WindowsHello protections. (https://www.acsac.org/2025/program/final/s329.html) 2/5 #Passwordless #Cybersecurity #EndpointSecurity

I am tired of #safety and #security being treated as essential barriers of entry, to get things done on an #everyday level. Please stick to #passwordless #logins and #MagicLinks if you must use something, and let the account holder, not the holder of accounts, verify by a manner of each of our choosing, how to prove we are who we say we are. This is far more secure and less prone to #identity #impersonation as a result.