News for hackers. Stuff that matters.
Re:Passkeys are a trap. Do not use them by chr15m on Sunday October 11, 2026 @08:30PM (#50049727)
If you don't like passkeys the solution is very simple. Resist using them. As long as a significant minority resist and refuse, they will have to keep other types of auth around.
Re:Passkeys are a trap. Do not use them by cowlevel on Sunday October 11, 2026 @08:48PM (#50049876)
Has to be a significant majority or else they'll just turn the other methods off.

I don't have the choice to use a bank card online without 2FA - it's mandated. I can either use one of the options provided or I will go to my bank in person and close my account. Those are the possibilities. Nothing else.

Re:Passkeys are a trap. Do not use them by chr15m on Sunday October 11, 2026 @09:08PM (#50050029)
An uncompromising minority has surprising power. See Nassim Taleb's idea of assymetric minority rule.

Passkeys are only one kind of 2FA.

Yes, banks are particularly bad at this because their threat model is strong.

My bank required installing an authenticator, but apparently recently they've allowed SMS based 2FA. It seems users complained/resisted and they had to accommodate them. Maybe you should give feedback to your bank. Be the uncompromising minority.

I think 2FA is fine and a good idea, but I agree with the author that passkeys seem fraught as designed.

Re:Passkeys are a trap. Do not use them by userbinator on Monday October 12, 2026 @02:59AM (#50052356)
TOTP is fine.
Re:Passkeys are a trap. Do not use them by lxgr on Monday October 12, 2026 @03:07AM (#50052430)
As somebody that’s had to deal with US banks and their bizarre “authentication” schemes: I wish.

Many would actually rather you close their account with them than them making the tiniest compromise or offering any alternative to their SOP at all. That SOP strongly assumes things like “all customers have a mobile phone plan with the big three carriers”, “all customers own property or at least have car insurance” (that’s already their authentication fallback flow!) etc.

Re:Passkeys are a trap. Do not use them by chr15m on Monday October 12, 2026 @07:26AM (#50054799)
Changing banks is incredibly annoying but this might be a reason to consider it.

I have also faced this issue with banks and their frustrating authentication issues. Not to mention proprietary app requirements.

Re:Passkeys are a trap. Do not use them by yeeeloit on Sunday October 11, 2026 @08:45PM (#50049847)
It's only a matter of time, and no correspondence shall be entered into.