News for hackers. Stuff that matters.

A comment on My new hobby: watching AI slowly drive Microsoft employees insane. Parent comment

Re:My new hobby: watching AI slowly drive Microsoft employee... by diggan on Wednesday May 21, 2025 @08:14AM (#44050644)
Except if you use a proper password manager that prevents you from using the autofill on domains/pages others than the hardcoded ones. In my case, it would immediately trigger my "sus filter" if the automatic prompt doesn't show up and I would have to manually find the entry.
[ Parent | on HN ]
Re:My new hobby: watching AI slowly drive Microsoft employee... by ipsi on Wednesday May 21, 2025 @08:40AM (#44050853)
And yet that's not enough, even when someone very definitely knows better: https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mail...

Turns out that under certain conditions, such as severe exhaustion, that "sus filter" just... doesn't turn on quickly enough. The aim of passkeys is to ensure that it _cannot_ happen, no matter how exhausted/stressed/etc someone is. I'm not familiar enough with passkeys to pass judgement on them, but I do think there's a real problem they're trying to solve.

[ Parent | on HN ]
Re:My new hobby: watching AI slowly drive Microsoft employee... by diggan on Wednesday May 21, 2025 @08:56AM (#44050967)
If you're saying something is less secure because the users might suffer from "severe exhaustion", then I know that there aren't any proper arguments for migrating to it. Thanks for confirming I can continue using OTP without feeling like I might be missing something :)
[ Parent | on HN ]
Re:My new hobby: watching AI slowly drive Microsoft employee... by skydhash on Wednesday May 21, 2025 @09:32AM (#44051269)
> If you're saying something is less secure because the users might suffer from "severe exhaustion"

Something "$5 wrench"

https://xkcd.com/538/

[ Parent | on HN ]
Re:My new hobby: watching AI slowly drive Microsoft employee... by simonw on Wednesday May 21, 2025 @12:57PM (#44053479)
Passkeys genuinely do protect against severe exhaustion attacks.
[ Parent | on HN ]
Re:My new hobby: watching AI slowly drive Microsoft employee... by diggan on Thursday May 22, 2025 @07:21AM (#44060930)
Yeah, but they genuinely also prevent you from moving away from companies in the process of enshittification, since the whole export/import thing seemingly hasn't been figured out or even less been deployed yet.

Besides, if you ignore security alarm-bells going off when exhausted, I'm not sure what solution can 100% protect you.

[ Parent | on HN ]