News for hackers. Stuff that matters.

pandorobo

Re:AI Adoption Rate Trending Down for Large Companies on Monday September 08, 2025 @03:29AM (#45165513)
Does it mean the number of companies newly adopting AI is dropping? That could mean that its just saturated so of course it would drop? Unless I am reading this graph wrong and it's actually the same companies that are now no longer adopting AI?
Re:The beauty of a text only webpage on Friday August 15, 2025 @11:32AM (#44913630)
Color contrast is also important. Like actually putting a readable header on the page. ('^_^)
Re:We replaced passwords with something worse on Wednesday August 06, 2025 @11:53PM (#44820417)
Clearly I didn't misread that. It's literally the very first bullet point?
Re:We replaced passwords with something worse on Wednesday August 06, 2025 @11:51PM (#44820405)
The first bullet point mentions phone number.

- Enter an email address or phone number

Thats not just email, that's also SMS.

Re:We replaced passwords with something worse on Wednesday August 06, 2025 @11:50PM (#44820400)
Thats simple a lie or you didn't read the article.

The very first bullet point states: Enter an email address or phone number

That insinuates email OR SMS.

It doesn't just mention email only.

Re:We replaced passwords with something worse on Wednesday August 06, 2025 @11:47PM (#44820389)
Specifically they are referring to synced passkeys (passkeys generated by services like Google password manager/1Password/Apple and are linked to that account).

Because these passkeys are stored in the Cloud and synced to your providers account (i.e. Google/Apple/1Password etc), they can't support attestation. It leads to a scenario where Relying Parties (the apps consuming the passkey), cannot react to incidents in passkey providers.

For example: If tomorrow, 1Password was breached and all their cloud-stored passkeys were leaked, RP's have no way to identify and revoke the passkeys associated with that leak. Additionally, if a passkey provider turns out to be malicious, there is no way to block them.

Re:We replaced passwords with something worse on Wednesday August 06, 2025 @11:39PM (#44820349)
Very short, badly written article. It can't even describe phishing correctly... At least label your threat model correctly.

While the premise is correct -- it's easy to complain but the author also provides zero recommendations on what is a better form of MFA.