ARSTechnica has an article on Passkeys that SN listeners will likely agree with: https://arstechnica.com/security/20...-but-its-most-definitely-not-usable-security/
-
Be sure to checkout “Tips & Tricks” Dear Guest Visitor → Once you register and log-in please checkout the “Tips & Tricks” page for some very handy tips!
/Steve. -
BootAble – FreeDOS boot testing freeware
To obtain direct, low-level access to a system's mass storage drives, SpinRite runs under a GRC-customized version of FreeDOS which has been modified to add compatibility with all file systems. In order to run SpinRite it must first be possible to boot FreeDOS.
GRC's “BootAble” freeware allows anyone to easily create BIOS-bootable media in order to workout and confirm the details of getting a machine to boot FreeDOS through a BIOS. Once the means of doing that has been determined, the media created by SpinRite can be booted and run in the same way.
The participants here, who have taken the time to share their knowledge and experience, their successes and some frustrations with booting their computers into FreeDOS, have created a valuable knowledgebase which will benefit everyone who follows.
You may click on the image to the right to obtain your own copy of BootAble. Then use the knowledge and experience documented here to boot your computer(s) into FreeDOS. And please do not hesitate to ask questions – nowhere else can better answers be found.
(You may permanently close this reminder with the 'X' in the upper right.)
That's bad "support" from PayPal. As a customer you should at least complain... even if they never end up doing it the CORRECT way by checking the browser for support rather than hard coding which browsers offer the support. (This is no doubt actually a Google lock-in situation, no doubt Firefox reports its support using the officially agreed standards but Google backdoored all that and some tired dev took the "easy route" rather than doing it the more difficult but "officially standard" way.)
Until I can easily move passkeys between my home computer, work computer, tablets, and mobile devices, I'm not ready to move over to passkeys.
The issue with this is that is doesn't fix the problem of inexperienced users who "give away" their credentials to phishers.
A replacement for passwords that doesn't fix one of the major problems of passwords is not actually a replacement then is it?
I thought the solution to this was you create a new passkey on the second device? Transferring the data is a possible security risk. I like the idea of creating more than one key for a site. Data doesn't transfer between devices, sites store more than one key per user. Many sites store the last few passwords anyways to ensure you are not reusing a password. Those sites should not have an issue with storing more than one key per user.
Seriously, do some of us really wonder how everything binary continues to manifest such a privacy/security disaster…even “informed” users simply don’t innerstand the cost of the “tyranny of convenience”, along with the dark destructive nature of effortless. The truth is, one cannot secure what one does not physically control...
But creating multiple VALID keys for the same site just increases the risk of a "password/passkeys" being guessed. Admittedly it may not increase the risk much, but it is directly contrary to the existing philosophy that once a password has been changed, the old one cannot be used.
password, yes. Passkey; no. Passkeys are public private keys. In Steve's solution SQRL, all sites you log in with use the same key pair. Even that is secure! The only added risk in the original question is he wanted to have both his home and work computer access PayPal. Having two places with valid keys is a risk; but passkeys are way safer than passwords. That's why you don't need second factor with passkeys, they are that secure.
if you use a password manager (ironic! isn't it?), you can move your passkeys among your different devices (as long as they have binaries for that)
can you even give a passkey to someone? The length would make it impractical to read out load. That is if you can find it through the ui
Well the context was to allow someone else to use it (or yourself in another place), so that would presume a mechanism to share it, no?
I was under the impression that the original design "trapped" them in a device to prevent any possibility of accidentally sharing it with someone you should not.
meant something more like this. I thought of someone trying to scam an elderly lady by having her read the pki files. To share it for your own use, get a password manager. Have all the passkeys i made on my computer on my phone
Similar threads
