News for hackers. Stuff that matters.
Re:Why we went passwordless on our new product by hprotagonist on Sunday March 07, 2021 @12:54PM (#26377971)
>What can happen is better federated SSO using OAuth2 like Apple, Google, FB, Github, and/or similar for web applications to defer or eliminate yet another mandatory password.

Then you get locked out of like 9 things at once when {you ragequit github for political reasons and forget to migrate everything, google kills yet another thing, google locks your account for funsies, apple locks your account until your macbook pro refund is processed correctly,....}

Re:Why we went passwordless on our new product by loceng on Sunday March 07, 2021 @01:01PM (#26378038)
Security requires good governance and trust - and ultimately realizing that everything connected online can and will likely be breached - and so if something is important enough, the design should be that it never touches the network. I personally don't fear any of my history or life coming out if it were - at least at this point, and in reality if security becomes a real concern due to well, tyranny and the universal battle against bad actors/evil, then my current location would be the only thing I'd ultimately not want known - and so you simply stay off grid then.
Re:Why we went passwordless on our new product by xg15 on Sunday March 07, 2021 @01:18PM (#26378190)
> Security requires good governance and trust

Neither of which the web currently has.

Re:Why we went passwordless on our new product by loceng on Sunday March 07, 2021 @03:52PM (#26379651)
Arguably true.