Live data from Hacker News

Passwordless: a different kind of hell?

jcarlosroldan.com

81–90 of 392 posts

Re: Passwordless: a different kind of hell?

#81
post #19

Earlier quoted context omitted.

Nah, thieves are scum. People don't steal cars and bikes to buy food, they do it because they're selfish and want a shortcut to get the things they want. In any first world country there are ways to get food without resorting to taking other peoples' possessions that they worked hard for. There are many people out there having a really hard time who would never even think about stealing because they were raised with…

It’s a matter of degree. We often put people in the position where they need to do some pretty terrible, degrading work just to eat. In my view as the alternatives you have get worse, it gets less morally questionable to steal. Furthermore, I think it should largely be evaluated by the harm it does to others, e.g. stealing a car from a sheltered rich person who can afford an uber in an emergency does them much less h…

> Thieves are definitely selfish, but so is everyone else in our free market system.

In a free market, all transactions are voluntary. "Selfishness" just means that you only agree to a transaction if it benefits you. But the other party will only agree if it benefits them, so it's a win-win.

Thievery, OTOH, is not voluntary for the victim, and is, at best, a win-lose. Not at all the same as a free market transaction.

Re: Passwordless: a different kind of hell?

#82
post #14

Earlier quoted context omitted.

Just turn on Passkeys on GitHub, then you don't need 2FA/TOTP. It's also faster.

My password manager autofilling will always be faster than any other option, especially one that requires me to pull out my phone, navigate to my authenticator app, switch to your app (which will only become more time-consuming as more sites require it), then type in the code by hand. The only thing that can compete with password managers on user experience is just actually remembering they're logged in instead of po…

Passkeys work without a phone, or a second device. Windows Hello/TouchID will verify you almost instantly. There are also browser extensions you can use, like 1Password or Bitwarden, to do the passkey flow for you if your device or OS lacks quick authentication options.

Re: Passwordless: a different kind of hell?

#84
post #7

I recently ordered something on ebay. Nothing expensive, just a £60 item, and delivered to an address I've ordered many things to in the past. First I had to log into ebay - no problem, got my password manager right here, as soon as I unlock my phone with my fingerprint. Now I'll just key in my 12 character, randomly generated password with mixed case letters, numbers and symbols. Then ebay decided they wanted to sen…

Why would you submit yourself to using PayPal when you don't have to? Serious question.

PayPal is used by a lot more people than most think to buy.

First it can pay directly from a bank account.

Second a lot of countries don’t have many options other than PayPal.

Re: Passwordless: a different kind of hell?

#85
post #72

Earlier quoted context omitted.

Both can be true: thieves are scum and modern society exacerbates the problem. Sure, we should punish crime but never solving the root problem and taking a "hardline" approach towards the symptoms feels good. But, it puts us in a perpetual state of law enforcement and anxiety about crime.

Please explain what is the root problem and how solve it.

Healthcare should be universal and require almost no paperwork from the patient. Our current system is too bloated and either requires a job with good insurance or weeks/months of research into your options.

Agencies like the DEA should be abolished and possession/use of drugs should not equal prison time or anything on your record. Of course, things like driving impaired are still punished because you're endangering others.

College should not be expensive or put you into debt for decades. In the US, we need a general cultural shift away from hyper individualism and unregulated capitalism.

Re: Passwordless: a different kind of hell?

#86
post #7

I recently ordered something on ebay. Nothing expensive, just a £60 item, and delivered to an address I've ordered many things to in the past. First I had to log into ebay - no problem, got my password manager right here, as soon as I unlock my phone with my fingerprint. Now I'll just key in my 12 character, randomly generated password with mixed case letters, numbers and symbols. Then ebay decided they wanted to sen…

I've never had to authenticate with a bank for using a card? Is this common for you?

If the bank fears the charge is fraudulent sometimes I've had to do it. But normally I don't.

Re: Passwordless: a different kind of hell?

#88
post #7

I recently ordered something on ebay. Nothing expensive, just a £60 item, and delivered to an address I've ordered many things to in the past. First I had to log into ebay - no problem, got my password manager right here, as soon as I unlock my phone with my fingerprint. Now I'll just key in my 12 character, randomly generated password with mixed case letters, numbers and symbols. Then ebay decided they wanted to sen…

I've never had to authenticate with a bank for using a card? Is this common for you?

I have a Mastercard branded card issued by the Dutch quasi-monopolist (ICS). Every time I have a transaction with a merchant with ties to NL, they force me to do 2FA using their crappy app.

I have no words to express how much I hate this.

Re: Passwordless: a different kind of hell?

#89
post #86

Earlier quoted context omitted.

I've never had to authenticate with a bank for using a card? Is this common for you?

If the bank fears the charge is fraudulent sometimes I've had to do it. But normally I don't.

If its the 'verified by visa' thing, it is in fact optional and you can cancel out of the wizard

Re: Passwordless: a different kind of hell?

#90
post #65

Earlier quoted context omitted.

Sounds like you've got some unusual configuration options turned on or something. The most glaring odd thing here is that you apparently don't have your password vault available on the same machine you're shopping from, which seems odd to me. Even so, if I went that route it'd still be easy b/c with the Apple ecosystem, the clipboard is shared between devices. One can copy a password from the phone and paste it on th…

Opening your password manage and displaying the strong password openly on the screen while manually retyping it on a different machine - rather than just installing the password manager on that machine - definitely sounds like a "why are you doing that?" kind of thing. Likewise I've used a half dozen different cards and multiple bank accounts through PayPal for the last couple decades and can't remember the last time…

> Opening your password manage and displaying the strong password openly on the screen while manually retyping it on a different machine - rather than just installing the password manager on that machine - definitely sounds like a "why are you doing that?" kind of thing.

That one's on me, yes. The Yubikey I needed to unlock the password manager on the PC was upstairs and I couldn't be bothered to get it, so I used my phone instead.

(Why was the yubikey upstairs? Well you see, that's where the fireproof safe is. But I can't blame ebay for that, so I didn't mention it)

Post reply on HN