News for hackers. Stuff that matters.

A comment on Potential Weaponizing of Honeypot Logs. Parent comment

Re:Potential Weaponizing of Honeypot Logs by wolletd on Saturday September 02, 2023 @05:11AM (#37359775)
To clarify, biometrics are only used for local authentication against the platform authenticator. An attacker still needs the authenticators private data, too. The authentication against the service is using public key crypto.

Also, you should be able to use a platform authenticator with a PIN.

[ Parent | on HN ]
Re:Potential Weaponizing of Honeypot Logs by elderlybanana on Saturday September 02, 2023 @05:58AM (#37360040)
I think understanding this distinction is going to be one of the main challenges for mainstream WebAuthn adoption over passwords as the default authentication method.
[ Parent | on HN ]