News for hackers. Stuff that matters.

A comment on Don't use passkeys for encrypting user data. Parent comment

Re:Don't use passkeys for encrypting user data by YmiYugy on Saturday February 28, 2026 @06:44AM (#47194014)
How is it not 2FA? It's MacBook + Fingerprint.
[ Parent | on HN ]
Re:Don't use passkeys for encrypting user data by JasonADrury on Saturday February 28, 2026 @07:06AM (#47194254)
It's not 2fa if you assume some catastrophic exploit chain that allows an attacker to dump your macbooks secure element.

I don't think that's a reasonable assumption for most people, and you're screwed in that situation even if you use yubikeys.

[ Parent | on HN ]