News for hackers. Stuff that matters.
Re:Passkeys were invented by engineers with zero understandi... by inigyou on Thursday July 23, 2026 @05:09AM (#49018796)
Why?
Re:Passkeys were invented by engineers with zero understandi... by coffe2mug on Thursday July 23, 2026 @07:37AM (#49019956)
Passkeys cannot be stolen. Yes, don't say that what if someone steals my iPhone, PIN, and adds their fingerprint.

Let's say eBay asks user to login. With passkey. Press and hold fingerprint etc. login done. Even with laptop.

And average Joe doesn't want to maintain a keepassdatabse sync it. Yes, you can always use your own server etc but others have life.

Re:Passkeys were invented by engineers with zero understandi... by inigyou on Thursday July 23, 2026 @07:56AM (#49020157)
how do I back it up and transfer it to a new device? This is relevant because an attacker can also do that.
Re:Passkeys were invented by engineers with zero understandi... by coffe2mug on Thursday July 23, 2026 @08:11AM (#49020333)
Buy a new iPhone. Sign into it. Everything is now available.

That is the reason: for the average Joe not having exportable passkeys is good.

Average Joe doesn't have to do backup. It is all automatic.

Re:Passkeys were invented by engineers with zero understandi... by inigyou on Friday July 24, 2026 @02:54AM (#49032031)
So I just have to get the victim to sign into my iPhone?
Re:Passkeys were invented by engineers with zero understandi... by coffe2mug on Friday July 24, 2026 @08:25AM (#49034580)
Yes. If you are such a person then do it.
Re:Passkeys were invented by engineers with zero understandi... by someguydave on Friday July 24, 2026 @08:19AM (#49034515)
Hiding the underlying exchange of data from the user does not mean the data is unstealable
Re:Passkeys were invented by engineers with zero understandi... by coffe2mug on Friday July 24, 2026 @08:24AM (#49034570)
With your logic nothing is unstealable. Go and watch film inception.

The main point is the average Joe it works seamless. And average Joe won't have to remember things.

Yes, it does. Not everyone wants to maintain password database.

Re:Passkeys were invented by engineers with zero understandi... by Ajedi32 on Thursday July 23, 2026 @09:31AM (#49021299)
Because as I just outlined, passwords, even when stored in a password manager, can be misused. (Phished, set to something weak/guessable, reused on multiple sites, leaked in a database breach, etc.)

Password managers make it easier to avoid those pitfalls, but passkeys make it nearly impossible to fall into them.