Re:Passwordless authentication with FIDO2–beyond just the web
by donatj on Wednesday February 22, 2023 @02:57AM
(#34892914)
> After the tenth failed attempt, the escrow record is destroyed.
This reads like literal nightmare fuel. Something out of a dystopian sci-fi novel. You get ten attempts to remember your PIN or your entire life will be utterly destroyed. You are locked out of society.
Also, what about if I break my iPhone and buy an Android[1]? Just SOL? That seems pretty anticompetitive
1. https://twitter.com/zinko45712997/status/1624766001987604482... - Quick Twitter search shows this already happening
Re:Passwordless authentication with FIDO2–beyond just the web
by LelouBil on Wednesday February 22, 2023 @07:31AM
(#34894573)
That's why I backup my password Manager's encrypted vault to a paid file storage (AWS S3)
If anything catastrophic happens I know I'll be able to recover access as I'm a paying customer.
Re:Passwordless authentication with FIDO2–beyond just the web
by makeitdouble on Wednesday February 22, 2023 @07:47AM
(#34894683)
How much support do you actually get ?
Tried once to see what access to a human I had with a personal GCP account billed a few hundred bucks every months, and the answer was “not much”, except for specific technical categories defined in the contact form.
But it's similar to other 2FA methods. First you can use alternative 2FA. When you don't have any more, you can use your recovery codes. If you don't have those, you have to rely on wetware - call support, prove your access in some other way.
The last step may not exist for free services...