News for hackers. Stuff that matters.

A comment on Ask HN: Why is WebAuthn so slow to take off?. Parent comment

Re:Ask HN: Why is WebAuthn so slow to take off? by DangitBobby on Sunday April 23, 2023 @12:04PM (#35677400)
Devices get snatched out of hands all the time.
[ Parent | on HN ]
Re:Ask HN: Why is WebAuthn so slow to take off? by drexlspivey on Sunday April 23, 2023 @12:07PM (#35677435)
Even if they snatch it unlocked they still can’t login because there’s an extra biometrics check required for WebAuthn
[ Parent | on HN ]
Re:Ask HN: Why is WebAuthn so slow to take off? by SgtBastard on Monday April 24, 2023 @11:06PM (#35696103)
In at least Apple's case, Device PIN is also a factor to unlock the secure enclave where the passkeys are kept - so, assuming there's no stronger enforcement that it must use FaceID/TouchID, shoulder surfing a PIN unlock of the device and then swiping it grants access to all accounts.
[ Parent | on HN ]