Microsoft Confirms Password Deletion for 1B Users

Re:Microsoft Confirms Password Deletion for 1B Users by jt2190 on Tuesday December 17, 2024 @01:32PM (#42443893)

> [D]o we go for the failure mode where people reuse passwords and lose money and data that way, or the failure mode where a company is physically incapable of restoring a customer's account?

Are you sure that Microsoft’s solution means that they are “physically incapable of restoring a customer’s account?” Apple’s system keeps copies of recovery keys in their cloud [1], unless you explicitly tell them not to do this. It seems like a reasonable compromise for most people’s security needs.

[1] Or effectively something like that.

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by lolinder on Tuesday December 17, 2024 @02:57PM (#42444679)

I get to that, but as I said above you've now compromised the security of the passkey system, which means your passkeys are actually only as secure as your recovery mechanism, and for convenience sake that recovery mechanism is usually quite insecure.

[ Parent | on HN ]