Hacker News new | ask | show | jobs
by coldpie 67 days ago
> But I agree: TooBigTech has TooMuchPower.

Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!
1 comments
palata 67 days ago
Or you spend 5 minutes reading about them and use a passkey you actually own?

Many times, people choose TooBigTech. People are generally waaaay too lazy to even consider spending some brain cycles on that.

link
coldpie 67 days ago
Unless the service you are trying to log in to requires you to only use an approved authenticator, as is explicitly supported by the spec[1].

[1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...

link
palata 67 days ago
Right, that sucks. But the service could also only allow you to use the Google SSO, it's not really a problem coming from the passkeys...
link