Re:Microsoft Confirms Password Deletion for 1B Users
by stubish on Tuesday December 17, 2024 @06:52PM
(#42446745)
We already saw something similar when 'Login with OpenID' became 'Login with Google/Facebook/Twitter'
Re:Microsoft Confirms Password Deletion for 1B Users
by jerf on Wednesday December 18, 2024 @10:41AM
(#42451343)
I'm not sure that the big players have a motivation to force us to hardware. If anything, a lot of these entities will be happy to not have you forced to hardware because it's a support headache when people lose hardware.
(Also, be sure to understand that being forced to hardware is not "you must use a phone"... it is specifically "this passkey is locked to this Yubikey and can not by any means be moved to any other device". I don't think we're going to be stuck on that. Plus I haven't dug into the protocol but I'm not sure anything stops BitWarden from just claiming to be hardware.)
That said, my eyes are peeled, and at the moment the momentum is in the other direction, in that they actually headed away from that.
If the functionality is built in, don't be surprised when they alter the deal and force it on you. What are you going to do if no one lets you use or migrate back to a username / password at that point?
We've seen the same thing thousands of times from big tech. They give us a system that's tolerable, but designed to leverage us into a bad position in the future. Once there's a critical mass, they'll flip the switch and we'll all get screwed.