CN=MFA_Everywhere,OU=BLM

@SporkSan@infosec.exchange
99 Followers
468 Following
237 Posts
Bad at Video Games. Bow-tie, popcorn, beer & identity enthusiast. #RVA #DSA Views are my own. He/His.

There's a lot of talk about passkeys recently and how they're not as good as strong, random, unique passwords in terms of UX and security. I agree with the UX part: the industry needs to converge on better and more consistent passkey UX in order for this to become mainstream and useful long-term.

But I don't agree on the security front: the phishing resistance property of passkeys is much better than passwords. @iamkale explains it well in his article: https://blog.millerti.me/2024/10/18/password-managers-arent-replacements-for-passkeys/

#Passkeys

Password managers aren't replacements for passkeys

There was some recent discourse about passkeys that bemoaned that they have so many issues that it’s better to stick with a password manager. The idea is that maintaining strong, unique passwords via a password manager is easier for users to understand. This completely misses the key point about why passkeys are such a stronger way of protecting login, though, so I decided to spend some time to compare the two approaches.

Matt's Headroom

For a while, I've been working with some other developers on improving passkey support in Linux. Here are my thoughts on what the road to a secure native API for interacting with passkeys. We'll need TPM support, measured boot, a virtual TEE, sandboxing kernel modules and more.

Sounds intriguing? Read here:

https://www.iinuwa.xyz/blog/linux-passkeys-update/

#Passkeys #Linux

Linux Passkeys Update

An update on improving passkey support in Linux

Celebrating #WorldPasskeyDay at #RSAC2025. Come say hi at the @yubico booth, 3301, and talk all things authentication! #FidoAlliance #YubiKey

Coinbase Chief Legal Officer: the critics who think we’ve bought out the government are refusing to engage with the nuanced and complicated fact that Trump used to be anti-crypto before we started spending hundreds of millions of dollars on politics

#Coinbase #crypto #cryptocurrency

The People Vs Elon.
London.

#BoycottMusk

Fuck this guy.

"GOP women voted for Trump, believing complicity would save them. MAGA men: pushing them out of l'ship, de facto legalizing abuse, & signaling that the era of "chivalry" will be replaced with the era of eating shit."

"Autocratic ldrs: Napoléon: decriminalized the murder of unfaithful wives -Mussolini: claimed that women “never created anything.” 21C is proving #misogyny & #authoritarianism aren't just common comorbidities but mutually reinforcing ills." -FA 2/22

#USPol
https://www.salon.com/2025/02/26/a-woman-is-like-a-child-maga-quickly-turns-its-sights-on-stripping-women-of-power/

MAGA men are already coming for GOP women

Salon.com
Now THAT's how it's done!

“Do Not Comply In Advance”

❌bossy
❌already a cliche
❌ implies permission to comply later

“Fuck You, Make Me”

✔️ leads by example
✔️directs yelling at opposition instead of allies
✔️ easy to chant at a protest or put on a banner"

×
Now THAT's how it's done!

@VeroniqueB99 #AltText

(Picture of Donald Trump + a picture of Janet Mills Governor of Maine followed by this text)

"If Donald Trump stops federal funding to Maine, we the people of Maine will take out federal taxes from all paychecks and no taxes will be paid to the federal government."

- MAINE GOVERNOR JANET MILLS

@VeroniqueB99 now let's do CA
@coldfish and every state thereafter. 👍
@VeroniqueB99 I wish there was a way the state could set up an escrow account, and we'd pay our federal taxes to THAT account and then the governer could simply say, "yah, I'm not going to release this pile of money until you give us the services we're paying for""

@coldfish

I hope they can do that... if they withhold, why not? It's like when you fight with your landlord, you pay your rent on an escrow acct until they fix the place kinda thing...

@VeroniqueB99 That's exactly the kind of thing I was thinking about. The state "could" do it by having payroll companies withhold to a state fund instead of giving the feds the money each month. Then they'd have to somehow insure you from penalties if they end up holding back payment. Kind of like a union will pay people some kind of salary when they go on strike.

It's an idea

@coldfish

Yeah, it's a great idea. 👍

@VeroniqueB99 not to be a downer but i can't find a single source for this
@VeroniqueB99 Maybe Denmark can trade Greenland for Maine.
No, Maine's governor didn't say state would stop paying federal taxes

Gov. Janet Mills released two statements addressing President Donald Trump's threat to withhold federal funding, but neither mentioned federal taxes.

Snopes

@heretohinder

I only saw the meeting with drumpf at the pupit where she yelled 'see you in court!' and that was great!