Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bringing passkeys to Android and Chrome

android-developers.googleblog.com

Post reply on HN
Print view View original

201–210 of 264 posts

Re: Bringing passkeys to Android and Chrome

#201

Post by Danidada »

yalogin wrote: post #160
account-5 wrote: post #36

I don't use my phone to log in to anything. All my stuff is done on a computer with a password manager. At no time am I even likely to rely on Google for anything this important; every other week there's a thread about Google killing off accounts for no reason. No way would any sane person allow Google access to this with their track record. And this isn't even considering my suspicion that Google only wants to "help…

Why can't the password manager kill your account? I am not advocating for google, just asking about the other solution you are relying on.

you can always use a password manager like the KeePass family which is file based. sync it across devices with nextcloud/syncthing instead of gdrive/Dropbox/one if you are extra paranoid

Re: Bringing passkeys to Android and Chrome

#202

Post by rektide »

It's be a damned good time for someone to start building a competing Google Sync impl & server & passkey implementation into Chromium.

For a while this was largely built around XMPP but now the stock Google implementation is custom.

I'd love a refresher crash course on what's in Chrome that's not in Chromium. It's been a long time since I used Chromium but I think when I did it seemed to have a as-best-I-could-tell working Google Sync implementation.

It's hard to imagine a scarier project to fork. I dont think there's a lot of resources out there for DIY'iny a Chromium fork.

Re: Bringing passkeys to Android and Chrome

#203

Post by rnotaro »

makeitdouble wrote: post #196
josteink wrote: post #100

Earlier quoted context omitted.

> it's a curse because the same person logging in from their ipad, android phone, and desktop PC needs to set up WebAuthn three times. Or just get some Yubikeys.

A Yubikey for a phone or an iPad seems pretty clunky. Outside of super high risk people and on-call devices, are there people actually using physical keys for their mobile devices ?

I actually do and it works pretty well. My Yubikeys are NFC compatible. I have my OTP generated on it and also use it for U2F / Webauth. I only need to tap my key to my phone for 2FAuthentification.

Re: Bringing passkeys to Android and Chrome

#204

Post by rnotaro »

makeitdouble wrote: post #196
josteink wrote: post #100

Earlier quoted context omitted.

> it's a curse because the same person logging in from their ipad, android phone, and desktop PC needs to set up WebAuthn three times. Or just get some Yubikeys.

A Yubikey for a phone or an iPad seems pretty clunky. Outside of super high risk people and on-call devices, are there people actually using physical keys for their mobile devices ?

Rt

Re: Bringing passkeys to Android and Chrome

#206

Post by pabs3 »

For those of you who want something like this with Firefox on Linux, the virtual-fido project might provide a decent alternative, it uses Linux's USB-over-IP support to provide a fake FIDO device, and Firefox supports FIDO devices for WebAuthn:

https://github.com/bulwarkid/virtual-fido/ https://news.ycombinator.com/item?id=32881956

Re: Bringing passkeys to Android and Chrome

#207

Post by pabs3 »

I wish WebAuthn would have a standardised HTTP header or TLS extension so it would be usable without JavaScript, currently every website has to implement their own login protocol in JavaScript.

https://github.com/w3c/webauthn/issues/1255 https://github.com/w3c/webauthn/issues/1616

Re: Bringing passkeys to Android and Chrome

#209

Post by ev1 »

linsomniac wrote: post #198
duskwuff wrote: post #117

Earlier quoted context omitted.

> I bought a Macbook last holiday season and couldn't even set it up until my wife set up her iPhone on my account... I have no idea what you mean by this. You do not need, and have never needed, to own an iPhone to use an Apple computer. > I bought my wife a iWatch last week and briefly thought of getting myself one but you can't use it without an iPhone... This, on the other hand, makes a little more sense. The App…

When I got my M1 MBP there was no way, that I could find, to set up the computer and login the first time without using an iPhone. I don't remember the exact phrasing it gave me, but the only way I could get the system set up was my wife logging out of her iPhone, and logging into it as me. I don't know if this is newer than your experience, or there was some trick to get past it, but I couldn't find one.

I have a M1 and M2 (Pro and Air, and non-M Pro and Air) and have never done this, and never seen it. I do not even have an Apple ID logged into any Mac laptop I have ever owned.

You do not need an account or an iPhone, this makes no sense to me. Was this purchased new from a retail store?

Re: Bringing passkeys to Android and Chrome

#210

Post by pabs3 »

jml7c5 wrote: post #194
stavros wrote: post #169

Earlier quoted context omitted.

WebAuthn credentials can be backed up, if you want. They can also be impossible to back up (and thus steal), if you want. It's up to you, which is more than I can say about passwords.

Do you know of any implementations that allow this? I've been looking around and even Yubikeys can't do it.

See the virtual-fido project I posted elsewhere in the thread.
Post reply on HN