Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passwordless: a different kind of hell?

jcarlosroldan.com

Post reply on HN
Print view View original

41–50 of 392 posts

Re: Passwordless: a different kind of hell?

#41

Post by mimsee »

mminer237 wrote: post #31
Shank wrote: post #14

Earlier quoted context omitted.

Just turn on Passkeys on GitHub, then you don't need 2FA/TOTP. It's also faster.

My password manager autofilling will always be faster than any other option, especially one that requires me to pull out my phone, navigate to my authenticator app, switch to your app (which will only become more time-consuming as more sites require it), then type in the code by hand. The only thing that can compete with password managers on user experience is just actually remembering they're logged in instead of po…

1Password supports Passkeys, not sure for others. But it's one click on the login page and you're in.

Re: Passwordless: a different kind of hell?

#42

Post by smitty1e »

SketchySeaBeast wrote: post #15
wkrause13 wrote: post #12

Earlier quoted context omitted.

Could you elaborate on your concern? My understanding of how most biometric auth works is that it functions a lot like passwords in that your features get translated into a non-reversible hash that should be meaningless to any other biometric auth system.

Yeah, assuming that my biometric auth is relatively strong, stays on my device, and is a device-specific hashed representation I have a hard time finding fault. I believe most modern phone's biometrics fit that criteria.

> stays on my device

Heh.

Re: Passwordless: a different kind of hell?

#43

Post by mimsee »

gipp wrote: post #35
davidmurdoch wrote: post #25

Earlier quoted context omitted.

It talks about passkeys and biometrics though.

At the very end, as possible alternatives to the hell they're describing.

Yeah and would passkeys themselves prevent the session from expiring? Notion et al can still have short lived sessions on their client apps.

Re: Passwordless: a different kind of hell?

#44

Post by BizarreByte »

cedws wrote: post #34
jampekka wrote: post #24

Earlier quoted context omitted.

This is why we can't have nice things.

I don't know how I'm supposed to have any sympathy for thieves when myself and my family have been victims of multiple thefts totalling tens of thousands of pounds over the past years. I comforted my mum while she bawled her eyes out for hours when her car was stolen off of our driveway at the crack of dawn. Fuck thieves.

One a thief always a thief, there's a reason it was punished so severely throughout history.

Theft has the highest recidivism rate too[1]. You can never trust someone who has stolen again, thieves are the scum of the earth and only hurt good people.

[1] https://www.gov.uk/government/statistics/proven-reoffending-...

Re: Passwordless: a different kind of hell?

#45

Post by radlad »

overboard2 wrote: post #27
jampekka wrote: post #5

Earlier quoted context omitted.

Thieves and other "bad actors" are often a consequence of deeper underlying problems. People don't tend to steal that much when they are economically comfortable. OTOH with no legal resort to get sustinence, you're guaranteed to get people to resort to illegal means. I'm rather baffled how educated adult human beings keep on analyzing the world using moralistic fairytale level concepts like "bad actors" or "evildoers…

If you were poor, you'd be carjacking people?

This looks like a ridiculous strawman's argument. For example, there's a large difference between stealing food from a produce stand (which I would certainly do if the alternative was to starve) and "carjacking people."

I agree with the OP - as a society, we should look more at aligning incentives rather than instilling morals.

Another huge area this comes up is the war on drugs - if you're caught with drugs, we slap you with a felony that ensures you can't get a real job... pushing you right back to drugs.

Re: Passwordless: a different kind of hell?

#46

Post by tored »

jampekka wrote: post #5
asylteltine wrote: post #2

The reason this happens is because of bad actors. This is why we can’t have nice things. Walk around and pay attention next time and you will notice all the little things that are shitty because of bad actors like thieves.

Thieves and other "bad actors" are often a consequence of deeper underlying problems. People don't tend to steal that much when they are economically comfortable. OTOH with no legal resort to get sustinence, you're guaranteed to get people to resort to illegal means. I'm rather baffled how educated adult human beings keep on analyzing the world using moralistic fairytale level concepts like "bad actors" or "evildoers…

If what you are claiming is true then the welfare state of Sweden wouldn’t experience almost any crime at all because no one in Sweden suffers from food insecurity.

The educated middle class can afford to hold the most out of touch abstract theories because they don’t need to suffer the consequences.

Re: Passwordless: a different kind of hell?

#47

Post by stronglikedan »

michaelt wrote: post #7

I recently ordered something on ebay. Nothing expensive, just a £60 item, and delivered to an address I've ordered many things to in the past. First I had to log into ebay - no problem, got my password manager right here, as soon as I unlock my phone with my fingerprint. Now I'll just key in my 12 character, randomly generated password with mixed case letters, numbers and symbols. Then ebay decided they wanted to sen…

That's weird. I just log in with my fingerprint only, and my paypal is linked to my ebay. I don't even thing I enter a second password or fingerprint to pay. Also, what the what is this? "I'll just key in my 12 character, randomly generated password..." Key in? Seems like you're making your own life hard! ;-)

Re: Passwordless: a different kind of hell?

#48

Post by charles_f »

BoppreH wrote: post #8

I understand the frustration with login systems, but why is the title "Passwordless: A Different Kind of Hell" if it doesn't talk about passwordless authentication, like passkeys, magic links, and biometrics?

I was confused as well. It seems to me that by lowering the experience complexity, while not really changing security, by the author's own logic the experience stars would go up a notch.

Instead they just mention it in passing with a "only time will tell" comment

Re: Passwordless: a different kind of hell?

#49

Post by tored »

radlad wrote: post #45
overboard2 wrote: post #27

Earlier quoted context omitted.

If you were poor, you'd be carjacking people?

This looks like a ridiculous strawman's argument. For example, there's a large difference between stealing food from a produce stand (which I would certainly do if the alternative was to starve) and "carjacking people." I agree with the OP - as a society, we should look more at aligning incentives rather than instilling morals. Another huge area this comes up is the war on drugs - if you're caught with drugs, we slap…

Why don’t thieves stop being thieves after they can afford food?

Re: Passwordless: a different kind of hell?

#50

Post by vt85 »

cedws wrote: post #3
asylteltine wrote: post #2

The reason this happens is because of bad actors. This is why we can’t have nice things. Walk around and pay attention next time and you will notice all the little things that are shitty because of bad actors like thieves.

I came to this realisation not too long ago as well. It's saddening to imagine how much better the world in general would be if it weren't for criminals. Generations before mine talk about their childhood as a wonderful time. Not having to lock their bikes up when going into a shop. Not having security cameras watching their every move. Not having barriers everywhere to prevent theft. My local supermarket introduced…

[dead]
Post reply on HN