Canard

joined 1 year ago
sorted by: new top controversial old
.io TLD going away? in c/[email protected]
[–] [email protected] 5 points 1 month ago

I remember the diagram tool draw.io, now diagrams.net mentioning this a few years ago, justifying their domain name change: https://www.drawio.com/blog/move-diagrams-net

Fedia.io now behind Fastly CDN in c/[email protected]
[–] [email protected] 3 points 2 months ago (4 children)

The privacy policy mentions a different content delivery network so it has to be updated. I also found "Mastodon" and "kbin" in it.

1
Webauthn Attestation and OpenSource Keys (fy.blackhats.net.au)
 

Webauthn (Passkeys) are only going to become more important in the future and as this grows, deployments with higher security risks and criticality are going to need to start to understand and embrace attestation of their keys.

In their current form, almost all software products and IDM's today allow you to enroll any cryptographic authenticator. It doesn't matter what make or model it is, it will be allowed.

However, not all authenticators are made equal. They each have different properties, security features, and some even have security issues affecting their hardware or software. Because webauthn is a self contained multiple factor authenticator, this means we need to be even more careful to ensure these devices are secure.

1
AutoSpill attack steals credentials from Android password managers (www.bleepingcomputer.com)
 

Security researchers developed a new attack, which they named AutoSpill, to steal account credentials on Android during the autofill operation.

1
Microsoft’s Windows Hello fingerprint authentication has been bypassed (www.theverge.com)
 

Windows laptop manufacturers will likely need to fix this one.

Firefox 120.0 released in c/[email protected]
Firefox 120.0 released in c/[email protected]
[–] [email protected] 1 points 11 months ago (1 children)

This version was supposed to bring WebAuthn passkeys support as this source mentioned: https://connect.mozilla.org/t5/ideas/support-webauthn-passkeys/idc-p/39321/highlight/true#M22887
Sadly this is not part of the release notes. I’m disappointed but I hope this will be implemented soon in Firefox.

1
What the !#@% is a Passkey? (www.eff.org)
 

A new login technique is becoming available in 2023: the passkey. The passkey promises to solve phishing and prevent password reuse. But lots of smart and security-oriented folks are confused about what exactly a passkey is. There’s a good reason for that. A passkey is in some sense one of two (or three) different things, depending on how it’s stored.