News for hackers. Stuff that matters.
Re:Microsoft Confirms Password Deletion for 1B Users by doktorhladnjak on Tuesday December 17, 2024 @12:13PM (#42443124)
Nobody is checking their email on vacation in an internet cafe in 2024. Losing your phone is a real pain these days.
Re:Microsoft Confirms Password Deletion for 1B Users by nijave on Tuesday December 17, 2024 @12:46PM (#42443428)
I assume any device in an Internet cafe is riddled with keyloggers so now you've lost your phone /and/ email account
Re:Microsoft Confirms Password Deletion for 1B Users by Kwpolska on Wednesday December 18, 2024 @03:27AM (#42448924)
An internet café is probably a bad choice, but I can't access a passkey-protected service from a friend's phone either.
Re:Microsoft Confirms Password Deletion for 1B Users by vel0city on Wednesday December 18, 2024 @11:21AM (#42451843)
> but I can't access a passkey-protected service from a friend's phone either.

You can use passkeys across devices. I've logged into sites for people using passkeys on other devices several times. I just tap or plug in my device to theirs when it asks for the passkey and it logs in.

Re:Microsoft Confirms Password Deletion for 1B Users by acdha on Wednesday December 18, 2024 @01:11PM (#42453152)
Nor can you access a modern site from their phone unless you have a Yubikey, access to SMS, or a recovery code.

If you need to do this, it works the same for a passkey: if it’s a very close friend, you can share the passkey with them. If not, you can use the same login you’re now with the same MFA. Passkeys don’t need 100% adoption to be effective: the big win is blocking phishing attacks and that works as long as you’re not using passwords by default.