News for hackers. Stuff that matters.
Re:Google announces passwordless by default: Make the switch... by compiler-guy on Tuesday October 10, 2023 @04:10PM (#37836834)
Now there is a technically savvy solution that is a technical tour-de-force.

Very very cool.

But also completely unrealistic for the average person to use.

Re:Google announces passwordless by default: Make the switch... by segmondy on Tuesday October 10, 2023 @04:30PM (#37837068)
How? The usage was very easy. You select a contact and add them as your recovery contact (by selecting contact from your contact list) The system adds the key in the background. If they don't have the app, the app asks you to tell them to install the app (viral growth?). The users didn't need to know any thing technical. But install app, and click yes/no like they do with a 2FA app.
Re:Google announces passwordless by default: Make the switch... by jsperx on Tuesday October 10, 2023 @05:25PM (#37837764)
I think the challenge is more coordinating the 8 people who will be a trusted part of your life long-term. Also they’d have to be sure to keep their fragments of the key intact through replacing devices, etc, no? Seems like just keeping a Yubikey in a safe deposit box would be simpler.
Re:Google announces passwordless by default: Make the switch... by segmondy on Tuesday October 10, 2023 @07:53PM (#37839283)
if they replaced their device, their new device would still preserve your key, just like you replacing your device keeps your key.
Re:Google announces passwordless by default: Make the switch... by Tijdreiziger on Tuesday October 10, 2023 @08:10PM (#37839415)
Define ‘safe deposit box’?

If it is a safe at your home, you need to have a fixed home address in the first place, and the usual advice about off-site backups also applies.

If it is at friends or family, you’re back at the same problem.

If it is a rented deposit box, you need to trust the company you rent it from (banks don’t usually offer such services anymore, and there are risks like in [1])

[1] https://www.nytimes.com/2019/07/19/business/safe-deposit-box... (archive: https://archive.is/7qbkR)

Re:Google announces passwordless by default: Make the switch... by doublerabbit on Tuesday October 10, 2023 @05:32PM (#37837859)
I don't have eight people, what then?
Re:Google announces passwordless by default: Make the switch... by drdaeman on Tuesday October 10, 2023 @06:26PM (#37838520)
You use different numbers, for example 3/5 or 2/3.

You have to have at least 3 peers, though (IIRC, 2/3 is the minimum split possible that would provide fault tolerance).