I know I can't speak for everyone, but I at least don't see the passkey as even pretending to solve that.
There frankly is no solution for the problem you are talking about, because the 'average person' is extremely disorganized and barely understands anything about security or authentication, let alone how to manage their passwords/secrets effectively. And it appears consumers "don't want" that... arguably for good reason. We accept a tiny chance of being hacked in exchange for knowing that if our house burns down with all our devices in it, we won't be locked out of an Apple/Google account for life, even if we weren't wise enough to keep a DVD full of exported passkeys or lists of recovery codes in a safe remote location.
Passkeys are in practice for one thing and one thing only (and they're very good at it!): Replacing passwords with something that unlike passwords:
1. The secret doesn't need to travel anywhere so it can't be stolen at authentication time
2. Uniform and large entropy not bounded by memorability, creativity, or misguided dumbass website owners ("Please use THESE AND ONLY THESE 'special' characters: ! @ $ % _ ")
3. Impossible to be improperly reused
4. Each device's secret is independently revocable.
5. Extremely difficult to 'phish' on a fake website.
Even if we don't fix the "analog hole" so to speak where you can either SMS-reset or socially-engineer someone into resetting it, if we could kill passwords globally and replace with Passkeys, it would be probably the biggest win for security. I'd challenge anyone to name a better single thing we could do.
> Weirdly phrased since when you have a full, real nuclear plant you need to be ready to deal with that tripping off the grid suddenly, because it happens regularly.
It does not, what is with solar proponents and lying?
The problem is they are required to maintain two entirely separate external sources of power at all times. Something drives it below two, the plant trips even though absolutely nothing is wrong with the plant.
The average person's house has a gateway/router/wifi thing from their ISP, a smart tv connected to the internet with microphones, and one of those iptv piracy boxes that's actually the source of all the residential proxy ips.
Convenience over all else is what 99% of people are doing.
Residential proxying seems a good trade for piracy to me. However, there's a chance it will attract attention of some authority, who (although proxying itself is legal) will see your piracy box and arrest you for piracy. However, this doesn't seem to happen in practice, perhaps because residential proxying is so common.
While TDP isn't the whole truth, a pretty solid rule of thumb is that a CPU will at most use about 2x TDP. That is still not that much here.
That said, GPUs look like they mostly vent to outside the case, but that is largely untrue. They mostly vent to the inside and that really heats up the case.
As someone who has a few top 10/100 overclocking records across various Zen configurations, you'd be very surprised what a couple C does for peak/sustained boost clocks.
Their security is nearly universally undermined by reset mechanisms.
There are virtually no sites where passkeys cannot be bypassed.
reply