News for hackers. Stuff that matters.
Re:Passkeys were invented by engineers with zero understandi... by crote on Wednesday July 22, 2026 @06:00PM (#49014053)
> at which point it’s no different to password syncing

You still get the phishing resistance, though!

Re:Passkeys were invented by engineers with zero understandi... by choo-t on Thursday July 23, 2026 @12:34AM (#49016971)
Password managers prevent phishing as they check for the domain name before inputing the password.
Re:Passkeys were invented by engineers with zero understandi... by jesseendahl on Thursday July 23, 2026 @02:20AM (#49017563)
Password managers do not architecturally, cryptographically make phishing impossible. Ultimately a user can still be tricked to copy/paste their passwords into fake websites, even when using a password manager. You could blame end-users for this behavior, but attackers don't care about blame. Ultimately, it doesn't matter who's at fault when there are massive phishing attacks happening at scale every single hour of every day. The only real solution to solve this problem for the entire internet is to make credentials architecturally, cryptographically unphishable by design. That's what passkeys give you.
Re:Passkeys were invented by engineers with zero understandi... by TeMPOraL on Thursday July 23, 2026 @09:26AM (#49021226)
Is the "phishing resistance" just inability to view and manage your own data? That's a bug, not a feature then.
Re:Passkeys were invented by engineers with zero understandi... by coffe2mug on Thursday July 23, 2026 @09:47AM (#49021540)
Downloading and keeping safe local data is a bug for others