| ▲ | crote an hour ago | |
Except that those "self-contained hardware modules" are actually rarely "self-contained" but usually an integral part of a smartphone running a huge bunch of mostly-untrusted code and that the containment keeps getting breached, of course. The only difference is that banks will now blame you for any losses caused by hacked devices because it is on paper "unhackable" with a well-updated device, so it is now your fault that their crappy bank app's security was broken. And you still don't get to use Passkeys with banks, of course. | ||
| ▲ | lambda_lord 12 minutes ago | parent | next [-] | |
Fidelity, Capitol One, and US Bank support passkeys. | ||
| ▲ | cyberax an hour ago | parent | prev [-] | |
I'm using a Yubikey that is permanently plugged into a USB-C port on my laptop and another one in my dock at home. > Except that those "self-contained hardware modules" are actually rarely "self-contained" but usually an integral part of a smartphone running a huge bunch of mostly-untrusted code and that the containment keeps getting breached, of course. And it actually doesn't matter if the secure device is designed correctly. Providing a secure channel over untrusted networks is something that we can do easily. > And you still don't get to use Passkeys with banks, of course. I can. I'm using US Bank and it supports my Yubikey-bound WebAuthn credential just fine. | ||