cn4med

ngl i'm not the sharpest tool in the shed but if i'm completely at a loss as an infosec professional I don't see how boomer aunt Helen could get it

first google result (in french, why not) "so here's what asymmetric encryption is. see, back in ancient Babylon... well that's it. that's how they work. encryption !" https://www.passkeys.com/fr/passkey-cest-quoi

RE: https://infosec.exchange/@jerry/116997664471097068 cool video showing how they work on the cryptographic side, but I still think the current implementation has many design flaws

so you click no. yet your password manager might still prompt you to save the key. otherwise Google will tell you it's ok, you can use the passkey on your phone (which you very likely did not know was there) to obtain a one-time token (not a passkey) and then on successful login... the website might ask you again if you want to store a passkey

as a normal user connecting to let's say google[.]com, you're suddenly presented with a screen telling you to set up a passkey. You don't know what this is, how they work, or most importantly (at least for me) how to transfer and / or recover them if you switch devices.

case in point : me on amazon[.]com. login -> wanna use a passkey ? no -> SAVE THE PASSKEY NOW -> close tab -> reload amazon -> sure you're logged in

or try explaining to the same person where they reside on their device (that person being old, they still might remember folders being a thing !) anyway. end of my rant. back to regularly scheduled posting of semi funny screengrabs and urlscan shots

we've spent decades trying to teach people about passwords. and then what 2FA is. and then what a real 2FA text is. now picture trying to explain that login process to your elderly uncle who's afraid he got 'hacked' on his 'facebook' (actually his aol email account)

evergreen. Instant classic.

can't wait to get rich !!1

oh cool advice-- hol up !

am I having a brain aneurysm ??