Royce Williams on Nostr: Oh look, another sensationalized "let's call leaving your back door open a compromise ...
Oh look, another sensationalized "let's call leaving your back door open a compromise in your front door" ... "article" title (actually a paid ad, disguised as an article)
https://www.bleepingcomputer.com/news/security/39-new-methods-that-compromise-passkey-authentication/I say again: phrasing these as a "compromise" of passkeys when they are actually *at a different step/layer* only confuses people's mental models and makes them panic *about the wrong thing*.
It would make all the difference, and I would have zero beef, if they just phrased it as "your front door is still strong ... but you'd better check your back door and windows, too".
Published at
2026-09-04 14:21:14 UTCEvent JSON
{
"id": "7f4b0f813961d5c8c16e53f178c6901402092807144152d6dd17121b558b23e7",
"pubkey": "69647d5b8817472ac2ced4b88fd94dceb69e7cb0603872771a6737470a865e1d",
"created_at": 1788531674,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@tychotithonus/117213211829022734",
"web"
],
[
"proxy",
"https://infosec.exchange/users/tychotithonus/statuses/117213211829022734",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/tychotithonus/statuses/117213211829022734",
"pink.momostr"
],
[
"-"
]
],
"content": "Oh look, another sensationalized \"let's call leaving your back door open a compromise in your front door\" ... \"article\" title (actually a paid ad, disguised as an article) \n\nhttps://www.bleepingcomputer.com/news/security/39-new-methods-that-compromise-passkey-authentication/\n\nI say again: phrasing these as a \"compromise\" of passkeys when they are actually *at a different step/layer* only confuses people's mental models and makes them panic *about the wrong thing*.\n\nIt would make all the difference, and I would have zero beef, if they just phrased it as \"your front door is still strong ... but you'd better check your back door and windows, too\".",
"sig": "8f3ead351f8515c86270aed4e6bc34aff3898f1243a9bc15312bdbbc4e60c1d7c8e5fb64bb3b84f7eed1b8fd9c2a98ca4ddd88533958f7de38fa4531aecdb5dd"
}