291
submitted 1 year ago by Tibert@jlai.lu to c/technology@lemmy.world

Passkey is some sort of specific unique key to a device allowing to use a pin on a device instead of the password. But which won't work on another device.

Now I don't know if that key can be stolen or not, or if it's really more secure or not, as people have really unsecure pins.

you are viewing a single comment's thread
view the rest of the comments
[-] Kusimulkku@lemm.ee 3 points 1 year ago

You're mentioning how it's an old solution as if that was some sort of argument. If you're not using it as an argument then it seems kinda pointless to bring it up.

I said the exact opposite. If the old thing works for you, go ahead and stay on it, but don't complain about the rest of the world improving and moving forward.

I'm not sure if you even realize you're doing it but you're doing it again, implying that it's better because it's newer. That's not a very solid argument.

And I answered him, he just doesn't want to know. I can't solve that.

I know you've mentioned some aspects but I'm still wondering, in your opinion, what would be the technical reason that the password database model with long and complicated passwords would be worse than the passkey setup. Or is it that they're as good but passkey might be a lot simpler to some folk?

[-] alvvayson@lemmy.world -2 points 1 year ago

Sorry, your arguing against some strawman here.

Keep using passwords if that's your preferred solution.

Not my beef if you can't see how MFA is stronger than something that can be copy-pasted in a MITM attack.

[-] Kusimulkku@lemm.ee 3 points 1 year ago

Would be a lot easier to see it if you tried to actually explain your position tbh

[-] alvvayson@lemmy.world -2 points 1 year ago

I did.

Passkeys = open standard, more secure by design, multi-factor.

Passwords = bad track record, easily compromised.

Can't dumb it down much more than that chief.

[-] Kusimulkku@lemm.ee 2 points 1 year ago

Password databases can have MFA too. Passkeys by default (on Google's implementation) seem to rely on just the device pin.

Passkeys = open standard

That's not really something they have over passwords lol.

Passwords = bad track record, easily compromised.

I mean passkeys are so new thet don't have a track record. So hard to compare on those merits. What do you mean easily compromised, exactly? Compared to password database model.

Can't dumb it down much more than that chief.

You clearly lack imagination. Passkey = more secure password less secure is much more dumbed down.

But I didn't want you to dumb it down, I wanted you to expand on what you said and be more specific and technical. How are you still not getting what people's gripe with your comments is lol

[-] alvvayson@lemmy.world -4 points 1 year ago

People are down voting because they have issues and I don't have the patience to entertain them.

Fuck it, keep using passwords, don't get vaccines and don't drink fluoridated water.

I don't give a shit.

[-] Kusimulkku@lemm.ee 2 points 1 year ago

Seems like you do give a few shits but not enough to clarify your reasoning I guess.

[-] wildginger@lemmy.myserv.one 1 points 1 year ago

Ive read all your comments, and it just sounds like you have no idea why its better. Its like someone told you its better and gave you a few buzzwords, and youre just parroting it.

I dunno man, if you cant explain the difference between the two maybe you shouldnt be insulting boomers, since you sound just like one

[-] alvvayson@lemmy.world -1 points 1 year ago

If you read all my comments on this Lemmy post (and not just this single comment thread were it was just me engaging in a flame war with a few idiotd) and you still don't understand why passkeys are better, then I can't help you.

[-] wildginger@lemmy.myserv.one 1 points 1 year ago

Yeah, but I think thats more your failing than mine

this post was submitted on 11 Oct 2023
291 points (98.0% liked)

Technology

59598 readers
2192 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS