I find myself cursing #passkeys yet again. I decided to try to store some passkeys on my #Yubikey for some of my more sensitive accounts that don't allow FIDO for #2FA, but now the passkeys are mysteriously failing to register (using Firefox on Linux).

One of the challenges of FIDO is that there seem to be many ways for it to not work (issues with the site, browser, OS, and whatever you're using for credentials), and the error messages are either non-existent or totally opaque to anyone who doesn't work on this stuff. By contrast, TOTP and passwords are relatively straightforward, mostly just work, and are easy to reason about.

I'd really like to see the end of passwords for authenticating to online services, but it seems like if someone like me, who has been using key-based authentication and encryption his entire adult life, still struggles to make it work then it's not a viable alternative.

is anyone aware how you can prevent the "choose how to save passkeys" prompt on MacOS?
its so annoying to press "cancel" everytime you use webauthn...

i have disabled "autofill passwords and passkeys" (because i dont want to use apple integration, i just use yubikey and chromium-based browser #passkeys

edit: "install linux" is not a valid fix for me on this machine

Las passkeys ya están cambiando la forma de entrar en cuentas: menos fricción, más seguridad y menos phishing. Así funciona el relevo de las contraseñas. #Ciberseguridad #Passkeys #Contraseñas #Phishing #Privacidad #Tecnología

https://donporque.com/que-es-passkey/

RE: https://infosec.exchange/@hcf/116766730950368400

The year is 2028. Through-Skin-DNA-Sequencing has supplanted Brain-Waves-Pattern-Matching, which has supplanted Intestinal-Fauna-Surveying, which has supplanted #passkeys as “the last authentication factor you’ll ever need.” Logging in to your bank requires a username, account number, password, one-time SMS code, passkey, vomit sample, 5-minute EEG and 3-minute arm scan.

Incoming money transfers still take two working days to show up on your account. Tuesdays and Thursdays are bank holidays.

I don't like #Passkeys over #Passphrase and #MFA (edit: specifically, rotating pin codes via a password manager or dedicated auth app)

Am I wrong? or is it the children who are wrong. #Security #Privacy

if #PassKey was a good technology, companies wouldn't be trying to force you to use them.

Yet another techbro invention. Who cares about consent, right? #PassKeys are happening to you, like it or not.

Never accept a drink from a person who works on them.