Natanael

You can with ADB, but yes that’s obnoxious

I brought a Steam Frame into the shower!

Hardware security keys is the other option. The FIDO2 ones are compatible with most sites using passkeys.

A DNS lookup on a domain says who runs the email server for email users on that domain (that’s how email senders figures out how to send you messages), and if that host is a known one then you can just pull the link to show. If you’re self hosting email then a few solutions can be recognized and login shown by guessing that the email software’s default URL pattern is used.

Passkeys cross vendor sync is in the works right now and you can already self host with Bitwarden

Because the security is not better. I looked into it back then and it simply didn’t have a chance.

FYI, passkeys can also do the Qr thing.

https://www.corbado.com/blog/qr-code-login-authentication

Even pw synced passkeys at least have the benefits of both being phishing resisting + replay protected, as well as being able to use the TPM chip for extra local protection.

Hardware keys are logically simpler though

https://developer.android.com/identity/passkeys/manage-passkeys

Actually not, 3rd party Android apps can act as passkeys providers

With Bitwarden you can even do your own self hosted sync of passkeys

https://bitwarden.com/blog/bitwarden-passkeys-mobile/

Any app where it doesn’t work has chosen to not use the right API

You can PIN lock hardware keys

Some password managers can sync passkeys for you! Bitwarden can handle it

How the fuck have you never heard of fingerprint copying?

Every fingerprint scanner which attempts to apply liveness detection has been fooled.

No biometrics is secure when used remotely. Ever. You can literally just replay the biometric data people send you after you create a phishing site and hack their accounts if it was sent raw.

Biometrics is inherently not securable and the only viable method of using it ever is locally only to unlock a different secret, which actually can be secure.

Most biometrics is trivial to duplicate, fingerprints can replicated from photographs.

Biometrics are battle tested and got annihilated in every conflict. It’s a total loser.

Only companies issuing their own passkeys on company hardware has a reason to enable attestation (forcing use of company approved devices throughout). Any public facing service has no reason to use attestation.

If you’re using software that properly uses your device’s SE / TPM chip then it’s much more secure against malware, etc. And the main selling point is the much stronger phishing resistance (can’t trick you into logging in via a fake site, etc)

Github doesn’t need to know how you implement it, just that your browser is handling it (and in this case the browser lets Bitwarden handle it lol)

GAN, generative adversarial networks

There’s supposed to be an inventive height. Obvious combinations aren’t patentable by law. But the patent offices are all stupid and just lets it happen and force people to take it to court.

Mistral makes a lot of local models you can run yourself, assuming that’s what this is about. Nothing would leave your computer

Doesn’t mean it’s a good idea to integrate, but it could be worse 🤷