this post was submitted on 15 Oct 2024
188 points (92.0% liked)

Technology

59589 readers
2962 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

“Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday.

you are viewing a single comment's thread
view the rest of the comments
[–] Gutless2615@ttrpg.network 63 points 1 month ago* (last edited 1 month ago) (23 children)

Literally just use a password manager and 2/MFA. It’s not a problem. We have a solution.

[–] huginn@feddit.it 27 points 1 month ago (1 children)

Never forget that technologically speaking you're nothing like the average user. Only 1 in 3 users use password managers. Most people just remember 1 password and use it everywhere (or some other similarly weak setup).

Not remembering passwords is a huge boon for most users, and passkeys are a very simple and secure way of handling it.

[–] funkless_eck@sh.itjust.works 20 points 1 month ago (3 children)

I work for multiple organizations. The majority of which have a Google sheet with their passwords in that are

      c0mpanyname2018! 

Those that aren't are

       pandasar3cute123? 
[–] huginn@feddit.it 2 points 1 month ago
[–] echodot@feddit.uk 2 points 1 month ago* (last edited 1 month ago)

At one point the organization I work for had a password that was literally Password-022!, guess what it was the following month?

[–] undefined@links.hackliberty.org 1 points 1 month ago

I had to start hashing passwords and sending it to the haveibeenpwned API.

I also fight with my users over data normalization because any time I add some rule (like don’t put “SO#” as part of the value of the “SO#” field), they’re too stupid to realize the point and find some other “hack” around it.

load more comments (21 replies)