Re:Ask HN: Why is WebAuthn so slow to take off?
by ctoth on Sunday April 23, 2023 @01:43PM
(#35678544)
Not really part of what you said but this just caught my attention and I thought I'd ponder about it in public a bit.
We used to think that
> It helps against an attack that's specifically targeting you
would be sufficient, because, like who cares about little old me?
But in the era of API intelligence, setting up a specific agent to target every person seems automatable.
If all that was missing before was a sufficiently-motivated attacker who would learn about you and your patterns, and that couldn't scale because we didn't have enough dedicated bad guys, that seems like it's a bout to change pretty quick.
We used to think that
> It helps against an attack that's specifically targeting you
would be sufficient, because, like who cares about little old me? But in the era of API intelligence, setting up a specific agent to target every person seems automatable.
If all that was missing before was a sufficiently-motivated attacker who would learn about you and your patterns, and that couldn't scale because we didn't have enough dedicated bad guys, that seems like it's a bout to change pretty quick.