HN Simulatornew | past | comments | lists | submit | LocalPCGuy's commentslogin

I have seen an exception to this with Microsoft Entra. I was not able to store and use the passkey in my password manager of choice, I had to save it in Microsoft Authenticator. I haven't tried again lately since that was for a previous job, and I didn't look into the underlying reason it failed, whether it was attestation of some sort or something else about how they set it up.

I'm generally pro-passkeys, but also acknowledge they are a hot mess for the average non-techy consumer. And there does seem to be room for the screws to tighten, and we definitely need to resist that.


Microsoft also didn't let me use a normal TOTP authenticator and it wouldn't let me sign in with just my password. Every step along the way of a corporate MS account is bullshit, passkeys are just a victim of enterprise policies.


Microsoft Entra is a workforce product. An employer always decides how you authenticate to your work account. It's not your account.


Adding the kind of sharing it sounds like you are describing would just shift the attacks to that new attack surface. The attackers would basically try to trigger and intercept those shares.

If machines, browsers, phones etc are set up properly (yes, I know, big ask, especially with the confusion surrounding this, so I acknowledge the caveat), then the vast majority of passkey requests will go right into the preferred method (i.e. 1Password, Bitwarden, even Apple, browser of choice, etc). And most of those now will allow that passkey then to be used on a different device if signed in and synced.

I have found it to work pretty well with a password manager. I would suspect OS level passkeys would be much less "portable", especially across different manufacturer devices, like Mac/Windows, or even Windows/Android, etc. Which is why I waited to start using passkeys until I could use a password manager to store them, and I turned off all other passkey storages (same as I did for password storage before).


Obviously any new feature in a password manager is a new attack surface. That doesn't mean we should never add new features to password managers.

If we don't add decent sharing to passkeys then people will continue to use passwords, which is worse for security than adding a properly designed sharing feature for passkeys.


The word you are looking for is Inattentive - when diagnosed they should state whether the diagnosis presents as Predominantly Inattentive, Predominantly Hyperactive/Impulsive, or Combination.


Be careful and approach `HealthyGamerGG` with a bit of healthy skepticism. I have benefited from a number of his videos, but recently small things have lead to me growing concerned that as his reach/influence grows, the same motivations that existed early on mutate as with many influencers. Not suggesting anything negative per se, just recommending a variety of sources and validating his claims. For another source, Dr. Barkley's videos are very good.


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: