Hey, anyone who has YouTube Premium can watch this! I hope this doesn't come across as an ad or anything. I just got excited by your clip and noticed, so I thought I'd share: https://www.youtube.com/watch?v=hBRQ-jBqk8I
I run a (web and native) app that integrates with Apple calendar and the like with per-user feed configuration. Due to the way Apple polls my servers, I am essentially hit with rolling 5 minute requests for every individual (non-negligibly sized) feed. The amount of bandwidth used at scale is not something I can just look at and shrug, and there are plenty of ways it could probably be made more efficient with levels of caching on near vs long-term items. I have to pass that cost on to my customer somehow. I wonder if this is something like that but at grander scale. There’s a lot of HIPAA compliance involved as well. Granted, I’m not charging a line item for that feature like they are here. I just roll it into the cost of the subscription and everyone shrugs because the price is justifiable to them.
I noticed that too. This also seems like a bit of an insult to the intelligence level of the average person. It’s precisely because attestation is a nuclear weapon that I doubt one of the big three will try it outside of their own specialized credentials. If someone tries to change ecosystems and finds that they’re going to have to reset all their passkeys it’s not going to take long for them to tell all their friends that passkeys suck and not to use them. This instantly kills adoption.
Furthermore, the rest of us are the people at the companies implementing passkeys. I did an implementation recently, didn’t require attestation, and can’t imagine why I ever would.
If we’re at this level of trust for all of FIDO, why aren’t we at legislative centers doing something much more dramatic about it instead of navel gazing about how we’re the smart ones who have recognized FIDO’s next big trick? How is attestation the problem here?
If the spec doesn’t guarantee portability, they’ll boil the frog to make sure you don’t get any.
> If someone tries to change ecosystems and finds that they’re going to have to reset all their passkeys it’s not going to take long for them to tell all their friends that passkeys suck and not to use them.
And their friends won’t care until they’re personally affected.
It looks nice. I wouldn’t roast it as much as admit that I can tell from some of the content phrasing that an LLM was used. The h1 feels cliche, for example. That comma doesn’t really need to be there.
Weirdly when I first got my California DL I thought it felt fake compared to my home state because it was so much thinner. Maybe it’s better for the environment.
reply