This Passkey idea sounds good in theory, but I have some serious concerns with what is described in this post.
#cososec
https://security.googleblog.com/2023/05/so-long-passwords-thanks-for-all-phish.html
I understand the mentality, but it almost assuredly has weaknesses and sociological issues besides.
Even IF it's storing it in the TPM/cryptoprocessor, the architecture has had weaknesses and flaws in the past and it's often not the simplest operation to fix. Can't wait to hear the inevitable "$ransomwaregang implements cryptographic key stealer in toolkit"
@KAutumnrain
Yep. Oh, and we need to have a Bluetooth proximity check from new device to phone. Guess I can't create a key on my desktop pc then?
Ya my desktop's off limits for that one...
Hell, even most of my Laptop collection lacks bluetooth. Neat!
> It's asking for the device passcode.
> It's 0000.
> Haha. Really, what's the code?
> 0000. Like everything else.
"1 2 3 4 5"
@KAutumnrain
Dammit, that's the exact same combination I have on my luggage!