logoalt Hacker News

NoidFonsense • today at 3:45 PM • 1 reply • view on HN

How? It wouldn't be easy at all it would be totally unconventional and break all sorts of expected workflows for passwords if you had to take a photo every time. For example at my work we have a ton of computers and none of them have webcams.

Passwords are client-neutral. Passkeys aren't: you can force a certain client, and now those clients can force an OS through attestation.

It happens now with 2fa today. I have gone through college for 4 years having to use this shitty duo mobile app and we have to take out our smartphones 20 times a day to do things and re-login after every 20 minutes.


Replies

phoghed • today at 3:50 PM

and your bank can't force a certain client for a password if they decide to? or that you need to drink a confirmation can? or whatever arbitrary technical constraints they want to do in general?

anything can happen. if your passkey stops working because you're using it from your smart fridge to access your banking app, then just use your password anyway.

➕ show 1 reply