News for hackers. Stuff that matters.
Re:Microsoft Confirms Password Deletion for 1B Users by sjducb on Wednesday December 18, 2024 @02:47PM (#42454228)
It’s theatre because you still need the non passkey recovery method. The system is as weak as its weakest link.
Re:Microsoft Confirms Password Deletion for 1B Users by Schiendelman on Wednesday December 18, 2024 @09:11PM (#42457658)
This is missing the forest for the trees. Phishing attacks won't ask you to reset your passkey - or if they do, they'll have to be much more complicated and targeted. This will dramatically reduce the attack surface threatening the vast majority of users.