I'm working to aggregate some common questions about #passkeys, both from non-technical and technical perspectives. These will be used in an end user facing site in the future.

Any and all feedback is welcome.

https://forms.gle/wmaydkzmUp2eKfJG7

(also would appreciate some reposts to widen the audience)

#passkey #webauthn #fido

After being privileged enough to work with hundreds of system owners and CISO’s on securing their systems, I finally found a public punch list that I would use myself. These guys lead with the key action:

“Treat reducing technical debt as an immediate priority and manage it with senior-level oversight.”

The number of times I’ve had a CISO talk to me about their new advanced protections, yet found Windows versions old enough to drive is…too many.

https://www.jpmorganchase.com/about/technology/blog/fortifying-the-enterprise-10-actions-to-take-now-for-ai-ready-cyber-resilience

If you or someone you know has an account on mastodon.cloud, I would highly recommend migrating to a new server. Lots of instances are in the process of completely blocking mastodon.cloud which will sever all connections for people on mastodon.cloud. Mastodon.cloud is effectively abandoned, running very old and out of date software with minimal moderation resulting in a good deal of moderation work for those of us running other instances.

I am posting this in hopes that some people on mastodon.cloud see it and decide to take action.