Rew

RIP Terry Hall

❤️

Apple, and the power they have, reminds of MTV of the 90's

@arekfurt AFAIU, DPK requires attestation as it's a cryptographic indicator that can be verified in some way through the FIDO Meta Data Service. And not all authenticators can provide attestation, as that needs certification... note: I don't really know what I'm talking about.

So here's what I don't understand: Why isn't this just part of the passkey standards for all usage, leaving it up to the service--or, much better, the account user or admin--to decide whether to treat device-specific keys and synced keys differently? security.googleblog.com/2022/10/Securi…

Props to @dashlane for being open minded blog.dashlane.com/engineering-de…

@andrewe @timcappalli Would an authenticator be able to tell if an RP is using a WebAuthn credential as a passkey or as a 2FA credential?

@timcappalli Semantics. FWIF, Apple isn’t making that semantic distinction when using a “passkey” for initial sign in or as 2FA — and they shouldn’t if we want to transition to “passkeys” broadly.

PayPal announced (tied to their Apple Pay agreement) that they’ed soon support passkeys, but… Passkey support is conspicuously absent from Twitter today — and now I’m noticing Google’s implementation no longer supports passkeys (just physical USB or NFC keys).

if you hate watching a billionaire destroy the place you live online, wait till you hear what they’re up to with planet earth

If you are in infosec and you deride and belittle the users you are charged with protecting, maybe it isn’t the right place for you?

@davejvwallace @simonwebb1976 ~20 years ago, post JFK interrogation

@tjrobinson Will try to see!

Had a call from my bank’s fraud team (I’m in the US, French account is overdrawn). All I needed to prove that I was the account holder was my account number and the fact I received the call on a registered number. 😬

Big day! With today releases of macOS Ventura and iPadOS 16, passkeys are now available on iOS, iPadOS, and macOS. Safari 16.1 for macOS Monterey and Big Sur, also out today, bring support for passkeys to those operating systems.

Our @AuthenticateCon attendees got an advanced sneak of this last week, but great news: founding #FIDO Alliance member PayPal has officially introduced #passkeys; rollout starting today to U.S. customers. Get the details: newsroom.paypal-corp.com/2022-10-24-Pay…

Since when does Face ID have a life of its own? Where has it gone? #onejob

@Njuchi_ I love the learn identity series by @vibronet . Really well designed content . auth0.com/docs/videos/le…

Son was put on a train to meet his cousins (he survived). Daughter is at a dog camp with her best mate. Other half is currently over the Atlantic, meeting me in NYC, she's never been to the US. I don't think we four have ever been so physically separate, leaves a strange feeling!