The United Kingdom’s Financial Conduct Authority plans to develop a framework for agentic finance that encompasses agent identity, delegated authority,
Since #passkeys are always about service authentication, how does that differ from any other situation where this service doesn't want you to access it any more? So your argument is not an argument against Passkeys but against stupid services. 🤔
I'd say: don't use *services* which you don't trust.
That also includes passkey providers and their services, independent from the #authentication method used and more. 🤷
At least Passkeys as well as #FIDO2 (both preferably using USB/NFC hardware tokens!) protect you from #phishing and #MITM. You don't have full protection otherwise. So it comes down to which risk is more important to you: a service provider becoming bad or protection of your account as long as you're using that service.
Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a spec... schneier.com/blog/archives/202…
Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone.
Two-Factor #Authentication (2FA) typically combines a password with a code, whereas Multi-Factor Authentication (MFA) adds more layers, such as biometrics (fingerprint/face) or hardware tokens. Read MFA vs 2FA: What's the difference windowspost.com/2fa-vs-mfa/
Key Differences Between 2FA and MFA
Number of Factors: 2FA limits authentication to two layers (e.g., password + OTP), while MFA can incorporate three or more (e.g., password + OTP + fingerprint).
Security Level: MFA generally provides superior security against sophisticated attacks because it relies on multiple independent factors.
Complexity & UX: 2FA offers a more streamlined user experience with fewer steps. MFA may cause more user friction due to additional login steps, but it enhances security.
Flexibility: MFA offers greater flexibility, allowing organizations to adopt adaptive, risk-based authentication, while 2FA is a fixed two-st
... Show more...
Two-Factor #Authentication (2FA) typically combines a password with a code, whereas Multi-Factor Authentication (MFA) adds more layers, such as biometrics (fingerprint/face) or hardware tokens. Read MFA vs 2FA: What's the difference windowspost.com/2fa-vs-mfa/
Key Differences Between 2FA and MFA
Number of Factors: 2FA limits authentication to two layers (e.g., password + OTP), while MFA can incorporate three or more (e.g., password + OTP + fingerprint).
Security Level: MFA generally provides superior security against sophisticated attacks because it relies on multiple independent factors.
Complexity & UX: 2FA offers a more streamlined user experience with fewer steps. MFA may cause more user friction due to additional login steps, but it enhances security.
Flexibility: MFA offers greater flexibility, allowing organizations to adopt adaptive, risk-based authentication, while 2FA is a fixed two-step process
2FA Example: Entering a password (knowledge) and a code texted to your phone (possession).
MFA Example: Entering a password, a code from an app, and using a biometric scan (fingerprint or face)
Learn the real difference between Two-Factor Authentication (2FA) and Multi-Factor Authentication (MFA), when to use each, and which one actually keeps your accounts safe.
Let’s Encrypt will no longer include the “TLS Client Authentication” Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let’s Encrypt to secure websites won’t be affected and won’t need to take any action.
Passkeys và WebAuthn đang cách mạng hóa cách chúng ta đăng nhập! Đây là giải pháp xác thực không mật khẩu, mang lại sự bảo mật và tiện lợi vượt trội. Không còn lo quên mật khẩu hay các rủi ro liên quan. Passkeys giúp bạn đăng nhập an toàn hơn chỉ bằng thiết bị của mình.
Passkeys và WebAuthn đang cách mạng hóa cách chúng ta đăng nhập! Đây là giải pháp xác thực không mật khẩu, mang lại sự bảo mật và tiện lợi vượt trội. Không còn lo quên mật khẩu hay các rủi ro liên quan. Passkeys giúp bạn đăng nhập an toàn hơn chỉ bằng thiết bị của mình.
I found out that my work laptop has a fingerprint reader built into it (turns out the power button doubles up as a reader), so I wanted to get it set up for easy authentication on the move (it means not having to worry about CCTV catching you enter your password)
It turned out to be pretty simple, this post documents how to do so.
Short documentation post detailing how to enable use of a fingerprint reader on Ubuntu and Fedora. I did this because my framework has a reader built into the power button.
X’s security-key switchover to the x.com domain is causing lockouts as some users get stuck in re-enrollment loops 🔐
Passkeys tied to twitter.com can’t transfer, forcing manual setup — and raising concerns about reliability during major domain shifts ⚠️ Public frustration continues 🤔
As part of an effort to retire the old Twitter.com domain, X is requiring passkey and security key users to re-enroll — but are getting stuck in endless loops and unable to finish.
Ah yes, the thrilling saga of #passkeys, where we exchange our beloved username-password duo for a shiny new set of "peculiarities" ⚔️. Because who doesn't want their #data triangulated by "large corporations" and "governments"? Journey into the riveting world of #authentication standards that solve problems you didn't know you had 🔐. lucumr.pocoo.org/2025/9/2/pass… #cybersecurity #privacy #technology #HackerNews #ngated
Chad is a teenage hacker turned cybersecurity expert who studied under the best in his field at UNC-CH, UCSB’s SecLab, IBM Research, and was a lead researcher at MIT LL where he played a pivotal role in various high-impact projects for the US DoD. He has broken every authentication system under the sun and has committed his career to doing better for our society.
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.
New NIST guide explains how to detect morphed images
Face Analysis Technology Evaluation (FATE) explains morphing in simple terms and offers advice on how to respond. It is meant to help organizations set up detection systems in places where morphed photos might appear, such as passport offices or border crossings.
Your "secure" 16-character password gets cracked in seconds while someone's "password123" remains unbreakable for decades. The difference isn't complexity—it's key stretching, the billion-dollar security method most companies refuse to implement. Banks, social media platforms, and major corporations store your passwords like amateurs, prioritizing server speed over your security. Meanwhile, a properly configured WordPress blog offers better protection than Fortune 500 companies. Key stretching transforms each password guess from microseconds into expensive computational warfare, forcing attackers to burn thousands in electricity and hardware per attempt. This economic barrier terrifies surveillance agencies more than encryption. The NSA complains about "going dark" when criminals use proper password storage because dragnet surveillance becomes financially impossible. Mass data breaches depend on weak security to remain profitable—fix the storage, collapse the entire stolen credential marketplace. Modern algorithms like Argon2 and bcrypt weaponize mathematics agai... Show more...
Your "secure" 16-character password gets cracked in seconds while someone's "password123" remains unbreakable for decades. The difference isn't complexity—it's key stretching, the billion-dollar security method most companies refuse to implement. Banks, social media platforms, and major corporations store your passwords like amateurs, prioritizing server speed over your security. Meanwhile, a properly configured WordPress blog offers better protection than Fortune 500 companies. Key stretching transforms each password guess from microseconds into expensive computational warfare, forcing attackers to burn thousands in electricity and hardware per attempt. This economic barrier terrifies surveillance agencies more than encryption. The NSA complains about "going dark" when criminals use proper password storage because dragnet surveillance becomes financially impossible. Mass data breaches depend on weak security to remain profitable—fix the storage, collapse the entire stolen credential marketplace. Modern algorithms like Argon2 and bcrypt weaponize mathematics against attackers, making graphics cards useless and specialized cracking hardware economically stupid. Yet companies choose profit margins over protection, leaving users vulnerable while claiming they care about security. Your operational security depends on understanding why password strength comes from cost, not complexity. Choose services that implement proper key stretching or remain defenseless against billion-dollar surveillance operations.
