• 0 Posts
  • 14 Comments
Joined 2 months ago
cake
Cake day: August 24th, 2026

help-circle
  • Azazel@lemmy.mltoPrivacy@lemmy.ml•Passkeys are a trap. Do not use them
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    51 minutes ago

    This is actually a terrible take. Passkeys provide a very large security benefit over passwords and have an open standard.

    It’s particularly ridiculous that they seem to think TOTP good passkey bad. They solve the same problem: symmetric persistent encryption like passwords is very weak. TOTP solves this my making it not persisting and passkeys solve this by making it asymmetric. Passkeys are mildly more convenient because you don’t have the copy a code over.

    Both also have the same potential for abuse, any service could require you use their specific app. The fact that this article makes it sound like TOTP is a perfect open standard while passkeys are a Trojan horse for abuse is ridiculous. If most services are using the open standard for TOTP why wouldn’t they for passkeys? Also not all services do obey the open standard for TOTP. I’m sure I’m not the only one who was forced to install the duo Authenticator because their institution was somehow sold on their protocol being stronger than the open standard.

    TOTP and passkeys are comparable and both with doing.



  • The web interface is hosted directly by your vaultwarden interface so it’s not lockdown-able. The only things that are would be the browser extension and phone apps. Both of which are formally unnecessary because you can always just use the web interface. I’m sure if they ever locked down there’d be community versions in no time as they’re basically just web wrappers anyway.


  • The “want to learn” is gonna carry a lot of weight here but I think and arch based distro like cachy works well for this. Cachy was my first distro and I really wanted to learn so it gave we a working starting place from where I could tinker and replace parts one at a time until they fit my liking. If I were to reinstall today I’d do plain arch since I know what I want and don’t need Cachy’s defaults anymore. Obviously everyone has their preferences but I think cachy is a really solid approachable distro for beginners, there’s a reason it just passed steamOS to claim the throne of most used distro on the steam hardware survey





  • What kinda dependency hell? I’ve been running my jellying server with it installed via pacman for over year and never had any problems. I admit I’ve also not messed with docker much in general but I assumed that would be more annoying cuz it would have to be updated separately and such