Skip to main content

Search

Items tagged with: 1


Google Authenticator’s Hidden Passkey Design May Expose New Passwordless Attack Vectors


Google’s passkey ecosystem quietly depends on a powerful cloud-side component that changes where “passwordless trust” actually lives and that shift could open new avenues for account takeover in the real world. Most passkey discussions focus on WebAuthn and FIDO specs, but attackers care about implementations, not standards. In Google’s case, synced passkeys sit on top […]

The post Google Authenticator’s Hidden Passkey Design May Expose New Passwordless Attack Vectors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
posted by pod_feeder

#1


I wouldn't say it is irrelevant when there is a worldwide push towards authoritarianism and countless examples of unreasonable search and seizure.

Plus, everyone has their own threat model. It's almost a meme in the privacy community, but there's a reason threat modeling and prioritization is step #1. It may not be a big concern to you (in your opinion), but imagine if it didn't exist for someone who needs it.

#1


#2 #1 #3 #4 #5 #6 #7 #8 @Friendica Support