News for hackers. Stuff that matters.

A comment on Microsoft Confirms Password Deletion for 1B Users. Parent comment

Re:Microsoft Confirms Password Deletion for 1B Users by nijave on Tuesday December 17, 2024 @12:34PM (#42443311)
The technically savvy do. The others don't but not because they don't want to--they don't know they exist. Everyone I know carries around NFC devices--either work badges or credit cards. I don't see how having an extra NFC device in addition to the multiple ones you already have is a burden.
[ Parent | on HN ]
Re:Microsoft Confirms Password Deletion for 1B Users by doublerabbit on Tuesday December 17, 2024 @01:53PM (#42444114)
I'm technically savvy. I don't nor want to own one.

Why should I be forced to pay for a YubiKey? €60 is a fair chunk of money.

Maybe buy me one I'll consider it otherwise I'm not convinced. I will once corporate gives me free open-source hardware.

[ Parent | on HN ]
Re:Microsoft Confirms Password Deletion for 1B Users by superfrank on Tuesday December 17, 2024 @05:07PM (#42445867)
I'm an EM at a large tech company. Spent a decade as a developer. I have a Yubikey for work and I hate it. I understand why I need it and the value it provides, but I hate having to cary around one more thing.

The fact that this user thinks the average person would be happy to have to cary one around is wildly out of touch.

[ Parent | on HN ]
Re:Microsoft Confirms Password Deletion for 1B Users by dymk on Tuesday December 17, 2024 @05:02PM (#42445814)
> The technically savvy do.

That's my point.

Yubikey doesn't pass the grandma test. Your everyday user isn't going to be carrying one around anytime soon.

[ Parent | on HN ]
Re:Microsoft Confirms Password Deletion for 1B Users by wkat4242 on Tuesday December 17, 2024 @07:39PM (#42447029)
It's actually a LOT easier to explain to your grandma than a recent MFA app like Microsoft authenticator that requires a smartphone, the user to unlock it, choose the notification, to enter a code from a list and confirm with fingerprint.

With passkeys via yubikey it's insert key, enter pincode (just like at the atm), touch and go. You don't even have to enter your account name or email because that's derived automatically.

Anyone who can get cash out can use a yubikey. Very different for MFA apps.

[ Parent | on HN ]