"UK.gov begins killing off passwords for 23 million users
vs.
“The NCSC is encouraging users to switch, although passwords aren’t disappearing just yet. Passkeys remain optional, and anyone who would rather continue signing in the old-fashioned way can do so.”
Clickbait bullshit.
So an actual good security move. What a shit headline.
Not really. Passkeys have their own issues
Way too soon for anything that takes itself seriously to rely on passkeys.
Passkeys are just a mess right now. Despite attempts to improve things, it’s gotten even worse over the past few years. The tech giants, password managers, browsers and websites have just not been willing to work well with one another through FIDO. I’m guessing the tech giants are most at fault but who knows.
I haven’t been following what these are or why they’re flawed. It looks to me like they’re taking Two Factor Auth, and removing one of the factors (the password). Now all you need is a device? If the device is lost or itself compromised, isn’t that still a single point of failure?
You can backup a 2fa code on so many multiple managers at the same time, how the hell can one backup a pass key?
Isn’t the main issue moving them and that was effectively solved this week?
those sms fees are crazy
Assuming it’s £600/day total (which would make more sense than per person), that’s a bit over £200k/yr. It isn’t that much taken relatively, but it’s still money that can be spent somewhere better, and it’s enough to make a noticeable impact depending on how it’s used.
