fforest Posted September 23 Share Posted September 23 (edited) I am too stupid to be able to decide if this is a good thing or a bad thing... Can anyone help?...... Could this be forced on us? Alls I know is new layers of security in technology have given me nothing but big headaches for the last 20 years... https://www.forbes.com/sites/daveywinder/2024/09/20/did-this-new-google-chrome-security-move-just-make-passwords-obsolete/ Passkeys are, without a doubt, the future of login security. 1Password has called them “nearly impossible for hackers to guess or intercept” and Google uses them to replace hardware key and two-factor authentication for high-risk users. Now Google has gone one step further in this move to a passwordless future: secure syncing across devices with Chrome on Windows, macOS, Linux and Android platforms right now, with iOS still in development but promised soon. Edited September 23 by fforest 2 Link to comment Share on other sites More sharing options...
Bazle Posted September 23 Share Posted September 23 3 hours ago, fforest said: I am too stupid to be able to decide if this is a good thing or a bad thing... Can anyone help?...... Could this be forced on us? Alls I know is new layers of security in technology have given me nothing but big headaches for the last 20 years... https://www.forbes.com/sites/daveywinder/2024/09/20/did-this-new-google-chrome-security-move-just-make-passwords-obsolete/ Passkeys are, without a doubt, the future of login security. 1Password has called them “nearly impossible for hackers to guess or intercept” and Google uses them to replace hardware key and two-factor authentication for high-risk users. Now Google has gone one step further in this move to a passwordless future: secure syncing across devices with Chrome on Windows, macOS, Linux and Android platforms right now, with iOS still in development but promised soon. Thanks. I haven't got a clue what it is all about, but I fear I need to learn very soon. 1 1 Link to comment Share on other sites More sharing options...
forcebwithu Posted September 24 Share Posted September 24 The 2nd to last paragraph in the Forbes article might help others understand how passkeys will work. A passkey credential is on-device, registered only once and then re-used as often as needed, using the device’s biometric user verification system, be that fingerprint or facial scanning. If no biometrics are available, then they can be used with a PIN code. The important thing is that it’s the possession of the device by the user, who authenticates as such with those biometrics, that makes passkeys secure. The remote server at the service, site or account you are trying to sign into will simply ask the user to activate their screen lock to complete the authentication process. And from another source, a more detailed description of what a passkey is. The difference between passkeys and passwords At this point, you should be able to distinguish between the two solutions, but we’ll still break down the key differences between passwords and passkeys to make sure it’s all clear. These are: Passwords are user-created strings of characters, whereas passkeys are system-generated cryptographic keys. Passkeys are unique by default, while passwords are as complex as the user makes them. Passwords are stored on servers or databases, while passkeys consist of a public key stored on servers and a private key stored on a device. Passkeys enhance cybersecurity through their dual-key authentication system, unlike passwords, which depend on their complexity. Passwords are authenticated only via servers, whereas passkeys require pairing public and private keys, stored on the servers and the user’s device, respectively. Users can change passwords, but managing passkeys usually requires specialized software. Passkeys provide strong protection against phishing and brute-force attacks, whereas passwords are inherently more vulnerable to such threats. 1 1 1 Link to comment Share on other sites More sharing options...
Glasseye Posted September 24 Share Posted September 24 Same with government biometric verification ID systems. Some good things with it once you get over the hump and are confirmed much easier to access and be verified which is especially important if you are moving around internationally. But, not good if you don't like being tracked everywhere and with everything you do. If you use Chrome everything google related (email, YT, maps,whatever) are now automatically connected once you sign in (eg. sign on to your gmail). I am thinking with the system proposed (and most surely will come out and be required will actually make what you do more secure. Except when google wants to sell it off to someone). Link to comment Share on other sites More sharing options...
karon steve Posted September 24 Share Posted September 24 My laptop hasn't got a touchscreen so I was wondering how I can scan a fingerprint. Turns out you can buy a USB mini scanner for under £20 in the UK. 1 Link to comment Share on other sites More sharing options...
forcebwithu Posted September 24 Share Posted September 24 24 minutes ago, karon steve said: My laptop hasn't got a touchscreen so I was wondering how I can scan a fingerprint. Turns out you can buy a USB mini scanner for under £20 in the UK. If your laptop is capable of scanning fingerprints, the sensor is somewhere above or below the keyboard. Link to comment Share on other sites More sharing options...
frankypanky73 Posted September 24 Share Posted September 24 1 hour ago, karon steve said: My laptop hasn't got a touchscreen so I was wondering how I can scan a fingerprint. Turns out you can buy a USB mini scanner for under £20 in the UK. Sounds like a scam to push the sales of laptops with touchscreen or scanner Pincode it's then! OTOH, If you watch YT and have Gmail, like I do .. this is just an expansion. But I know the stories of fellas losing everything and all access, bc off some improper (alleged) ch*ld p*rn... Which turned out to be picture of his own daughter at the beach. Best to keep important stuff stored offline, like a external HD. I do that every 6 months Link to comment Share on other sites More sharing options...
Glasseye Posted September 24 Share Posted September 24 3 hours ago, karon steve said: My laptop hasn't got a touchscreen so I was wondering how I can scan a fingerprint. Turns out you can buy a USB mini scanner for under £20 in the UK. Link up with your phone and you can do on it, also the biometric pic. It's like an acid trip. Link to comment Share on other sites More sharing options...
KWA Posted September 24 Share Posted September 24 Since Apple's fingerprint ID got bypassed/hacked shortly after being released I'll reserve judgement on any new security measures outwith my control. Link to comment Share on other sites More sharing options...
karon steve Posted September 24 Share Posted September 24 When I set up my new phone I had to install a security measure to be able to use Google Pay. Nokia advised a PIN rather than face or fingerprint as it is more secure. Link to comment Share on other sites More sharing options...
Butch Posted September 24 Share Posted September 24 If only we had a conspiracy club in the relevant section... Is this not all too convenient if the authorities want to access all of your data etc?. You get arrested upon a spurious charge which requires identity and the authorities access to your phone, and bingo - they then have everything. I can see there being a kickback to all of this. Everything that we really don't need is forced upon us as "convenient" like contactless payment, Biometric access, online banking etc. How much fraud or cases of individuals being scammed out of savings were there before online banking became a thing?. How much identity theft was there prior to all our information being stored electronically? How much information did the marketing companies have on us and our spending habits in 1990 compared to today?. Dangerous times. Link to comment Share on other sites More sharing options...
Glasseye Posted September 24 Share Posted September 24 52 minutes ago, Butch said: If only we had a conspiracy club in the relevant section... Is this not all too convenient if the authorities want to access all of your data etc?. You get arrested upon a spurious charge which requires identity and the authorities access to your phone, and bingo - they then have everything. I can see there being a kickback to all of this. Everything that we really don't need is forced upon us as "convenient" like contactless payment, Biometric access, online banking etc. How much fraud or cases of individuals being scammed out of savings were there before online banking became a thing?. How much identity theft was there prior to all our information being stored electronically? How much information did the marketing companies have on us and our spending habits in 1990 compared to today?. Dangerous times. Yes. It's like break dancing through a mine field. Link to comment Share on other sites More sharing options...
Recommended Posts