News for hackers. Stuff that matters.
Re:Tailscale doesn't want your password by stavros on Thursday June 08, 2023 @04:11PM (#36248128)
Still not secure enough, sadly. They can be captured, leaked, stolen, phished, etc, and that's if you use them correctly.
Re:Tailscale doesn't want your password by megous on Thursday June 08, 2023 @04:21PM (#36248340)
Passkeys can't be stolen, got it. :)
Re:Tailscale doesn't want your password by stavros on Thursday June 08, 2023 @04:23PM (#36248357)
Yep, hardware Passkeys can't.
Re:Tailscale doesn't want your password by megous on Thursday June 08, 2023 @06:26PM (#36250091)
Physically impossible to just take someone's HW token. And firmware/HW has no bugs, so malware taking the keys is also impossible to write. There were never ever any FIDO token vulnerabilities and never will be.