News for hackers. Stuff that matters.
Re:Apple Passkey by Apocryphon on Monday June 06, 2022 @02:42PM (#31644114)
As a long-time Safari user who uses keychain heavily in lieu of 1Password or other managers, I probably will migrate to using Passkey because it sounds pretty seamless.

But the lock-in point seems like a founded critique. Does anyone disagree with this claim?

Re:Apple Passkey by michael1999 on Monday June 06, 2022 @02:45PM (#31644142)
I'm not sure this is any more locked in then the parent post is locked into 1password. Moving auth tools is a pain.

Anyone implementing FIDO should allow you to enrol multiple devices. As long as the auth consumers allow multiple keys, there's no lock-in. You just need to setup your new device before ditching apple.

Re:Apple Passkey by vorpalhex on Monday June 06, 2022 @02:51PM (#31644214)
1Password et al offer many export options including very simple csv
Re:Apple Passkey by e_y_ on Monday June 06, 2022 @02:56PM (#31644307)
Looking at how various places do 2FA, it's likely that at least some websites will not support multiple keys even if they ought to.

Also, I imagine that many people do not have the luxury of multiple devices. So if you lose your phone, you'll need to buy or at least borrow another iOS device to recover it from iCloud before you could switch to Android.

Re:Apple Passkey by mwcampbell on Monday June 06, 2022 @03:00PM (#31644378)
How common would it be for someone who has just lost their phone to want to immediately switch platforms? Isn't it much more likely that they'd want a new device on the same platform as the one they just lost?
Re:Apple Passkey by sokoloff on Monday June 06, 2022 @03:09PM (#31644541)
If they were already planning to switch platforms, the loss or destruction of their old device provides a natural moment to make the switch, where buying a new device feels like it's locking yourself in for another couple of years.
Re:Apple Passkey by Trollmann on Monday June 06, 2022 @03:52PM (#31645254)
Supply chain issues, sanctions, travel or prices you can‘t afford at the moment your phone breaks down may make you switch the platform involuntarily.
Re:Apple Passkey by howinteresting on Monday June 06, 2022 @02:50PM (#31644198)
Moving auth tools is actually quite simple. I migrated from lastpass to 1password a few years ago and it was very straightforward.
Re:Apple Passkey by samcat116 on Monday June 06, 2022 @09:04PM (#31648596)
I think they must know they need to have some sort of migration/export strategy. Maybe its just to early for that to be implemented yet. I mean I'm not even aware of any websites that support Passkeys as the sole auth method.

How are these handled in Chrome/FF/Windows/etc.