News for hackers. Stuff that matters.

A comment on Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard. Parent comment

Re:Apple, Google and Microsoft Commit to Expanded Support fo... by signal11 on Thursday May 05, 2022 @11:02AM (#31274259)
> Your average user is more concerned about losing their password than they are about authenticator sovereignty

Right up to the point when they’re locked out from their Google, iCloud or Facebook accounts with little recourse or appeal. And then they discover it’s not just Google, a whole host of other services don’t work.

And it does happen, and I for one don’t want to wait for legislation to mitigate this blatant attempt at yet more centralisation.

Better to not centralise in the first place.

[ Parent | on HN ]
Re:Apple, Google and Microsoft Commit to Expanded Support fo... by zozbot234 on Thursday May 05, 2022 @11:12AM (#31274377)
Many authenticator apps allow you to extract and back up the private key yourself, with no involvement of any 3rd party. But it's a totally optional workflow and you're never asked for that private key while authenticating, so the mass phishing and spear-phishing attacks seen with passwords are still infeasible.
[ Parent | on HN ]