• 4 Posts
  • 124 Comments
Joined 6 months ago
cake
Cake day: April 19th, 2026

help-circle


  • I apologize. The reply you responded to was entirely satirical. It was written in frustration. From my point of view passkeys are the way to do authentication. More specifically public-key cryptography. It has a lot of desirable qualities. Governments and ‘tech platforms’ should have been using it from the start–we’ve had the software to do this since the 1980s and it was libre-software by the 1990s.

    Any criticism of passkeys (as brought up in this thread) are more so applicable to the private-dictatorships that are Microsoft, Apple and Google. The contrary behavior of continuing to use these private-dictatorships whilst decrying passkeys is tantamount to hypocrisy? stupidity? To give a tiny bit of context: the quality of attestation in passkeys are also applicable to SSL-certificates, yet no one is decrying SSL-certificates. It’s also applicable to every GNU/Linux distribution and libre-software at large.

    That’s to say the criticism is written from a place of ignorance. “Privacy” forums on the internet are not interested in reality. Their users are full of users with static behaviors. More often than not any questions asked in these places amount to “how can I continue doing what I was doing before? Big-corp has introduced a change I don’t like. I want to do the exact same thing on big-corp that was previously permissible.” When the factual observation is stated: “big-corp is a corporation designed for surveillance-capitalism therefore if you desire liberty and privacy whilst computing you cannot use such a corporation in any manner” it’s met with unfounded hostility, hypocrisy and lies. Any use of such software is contrary to your stated desire: digital-privacy. Even when responses illustrate how you could achieve what the OP wanted, but with libre-software and privacy-preserving-software you’re often met with: “no. I want to use Google/Microsoft/et al.” Users are lazy idiots.

    Technical and correct responses are ignored whilst a flood of ignorant, emotional or status-quo enforcing responses are brought to magnified attention. I’ve abandoned restraint and started to shitpost as every one else appears to be doing.

    I suppose this is all a criticism of ‘social-media’ and how it’s a waste of everyone’s time.



  • Google does this: “wow best thing ever look at the cranks getting upset. No privacy in public places. Thanks Google.”

    Amazon does this: “wow worst thing ever–they’re not even letting me look at the data.”

    Daily reminder: you’re sharing a video hosted on YouTube. Inconsistency and lack of logic will get us to privacy one day. Keep at it gang! Chins up! Port paddle in reverse! Starboard paddle straight–we’ll get there in no time! Such enthusiasm!



  • dropdrip@lemmy.mltoPrivacy@lemmy.ml•Passkeys are a trap. Do not use them
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    3 days ago

    No, I’m not assuming people are using a Google wallet.

    Most businesses only release an android package via Google’s PlayStore. (“Download our app via PlayStore.”)There’s no reason a bank couldn’t host their .apks on their website (if you’re unfamiliar with the .apk extension imagine it’s a .exe: you click on it and a program runs; an .apk is to Android what an .exe is to Windows). To download packages from Google’s PlayStore requires a Google account. Google demands a few things from these two parties: publishers need to pay Google a fee to have their .apk hosted by Google and users need to run Google’s spyware in order to access those .apks hosted by Google.

    It’s often stated that if you want digital-freedom/privacy use GrapheneOS (if you have a compatible Android-device) or use a linux mobile-phone. To which most users respond: but my bank app doesn’t work on those platforms, therefore I won’t use either GrapheneOS or a linux-phone.

    The bank app won’t work, because Google’s spyware is not included in GrapheneOS (a point of GrapheneOS is to avoid such spyware). Because GrapheneOS (or linux) doesn’t include Google’s spyware Google will do its best to block such devices from accessing Google’s PlayStore. Such computers are violating Google’s demands: if you want access to the PlayStore you have to run Google’s spyware.

    Even if you were to get the appropriate .apk by avoiding Google directly (perhaps a friend who got it from Google then passed it to you) the bank’s .apk would fail to run on a device free of Google’s spyware, because you’re not capitulating to Google’s demand: you didn’t get it from Google’s PlayStore and the ‘app’ knows that by the lack of Google spyware. (Google’s spyware and the bank ‘app’ talk to each other. If the app can’t talk to Google’s spyware it will halt.)

    Therefore if a bank only has an ‘app’ to interact with that bank is saying: you have to download it via Google’s PlayStore–which necessitates a Google account and running Google’s spyware. Therefore if you want to use banking ‘apps’ you need to enable Google’s monopolistic, spyware practices (you have to enable the corporations to practice surveillance-capitalism). Google defends this practice often with security-theater (“Google says it must be done this way for security.”) when in reality it’s about entrenching a market monopoly.

    This is absolutely removed and I do deride users who say they want computing-liberty and -privacy, because there are banks who still have usable websites. You don’t have to bank via an app. If you do bank via an app you do so with full acknowledgment that: a) you’re rewarding anti-competitive behavior; b) you’re entrenching Google’s monopoly over Android; c) you don’t actually want computing-liberty or -privacy.

    It’s piss easy to change banks. It’s impossible to stop Google. If you want privacy you have to ditch Google, which means banking with a bank that allows you to bank via a desktop-computer (via a website) or in-person through bank-branches. If the only way to bank with your chosen bank is via an app that then means the only way to bank with your chosen bank is by enshrining Google’s monopoly into your life.

    Passkeys are a completely separate thing. They’re an increase in security for all users. Users are frustrated by ‘big tech’s’ increasingly monopolistic practices and instead of doing anything practical (like not running those particular pieces of software) they’ve latched on to decrying passkeys, which the majority of the commentators are actually clueless about. They’re just seeing those ‘big tech’ companies forcing yet another change onto them. They’re lashing out against their lack of power. They’re lashing out against their subjugation by ‘big tech’. That they’re being forced to use “passkeys” when they don’t even know what a passkey is.

    Passkeys are an open standard. They’re not entrenching anyone’s monopoly. Increased security is desirable by all parties (corporations, governments and individuals). Passkeys enable that. You’re not locked into Google’s Android, or Microsoft or Apple. People are under the assumption they are however.

    I could host my own website using passkeys as the method for authentication. No big-corp involved. Offline. Spooky. Big-passkey is coming for you.

    That probably left you with more questions than answers…



  • It’s something you pass around–like a word, but a key instead. If you’re familiar with passwords–instead of a word–imagine a key: a passkey. That’s what passkeys are. The issue with passkeys is–as you pass them around they begin to open more and more stuff; everyone is opening stuff with your key as it’s passed. So they need to be sanitized every now and then. Deposit them into a furnace and buy a new passkey. Every two to three days. If you have more questions please feel free to ask!



  • This is already the reality without passkeys. The correct response is to bank with a bank that isn’t enabling Google’s monopoly. Pretend passkeys don’t exist–nothing’s changed. You still can’t use your bank’s app without a Google Account if your bank is an enabler of Google’s monopoly. So… again, myopic dimwits are getting angry at something, but don’t know what. They’ve latched onto passkeys though. Amusing.










  • I hope they’re employing a lot of talented mathematicians.

    I can imagine a scenario where a machine spouts out information, only for it to be indecipherable to the controllers. Human-analysis is required to prove that it is or is not true and that can only be done at human-speed, whilst the machine creates at hyper-speed. It’s more costly to refute nonsense than it is to create.

    It could also be perceived as provoking free-labor from specialized individuals.

    I am clueless about mathematics though so I’m just creating more nonsense. I feel a bit morose. It’s as if the whole world is just talking about computers, whilst the natural world dies.


  • As a child I was suspicious of death. What is it? One moment you’re alive and the next you’re not. I reasoned that it must be a state of non-existence, just as was my state before my birth. I could not know that though. One moment I’m not alive and the next I am. As far as I knew one person died and another was born. If I were to die I might just be born again somewhere else. I was horrified: we’re trapped. I never wanted to be alive. I am compelled to be. I do feel trapped. I’m plagued by procrastination in every aspect of my life. If I could choose I would choose to have never existed. I see life as a mistake.

    Abstract absurdities such as Buddhism (below commentator mentioned it) have taken on a different quality as I age. I would have mocked such absurdity as a child–and I was often confused about people’s fascination with fantasy (religions)–but time has given it a context. Life’s absurd and if everything’s absurd nothing is.

    I would embrace death if I could get their fast, without this body refusing so completely. I think it’s a fact that there’s more suffering than pleasure in all aspects of life.

    Everything I perceive is full of contradictions: if you were to love a partner you’d never wish childbirth upon them; to force pain upon them willingly and to put them at risk of death itself during childbirth. Every child is a mistake.

    I feel there’s two-parts to us. One that has a type of abstract logic and the other that has a real logic. They’re at constant odds with each other. Some people are controlled more by one than the other, but no one is content in any capacity.

    Because it’s such a taboo topic I have no grounded reference, but I do wonder if everyone would rather not have existed.