Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on mander.xyz

9 replies

Passkeys were great, until they started making things that aren't actual passkeys (FIDO2/U2F hardware tokens) act like one (phones and faces)

2

One of the banking apps I use has two ways to set up:

  • Scan a QR code in Internet banking, set up with SMS + password in the bank. Requires real Google Play Services.
    • Google Lens is a very good QR reader with advanced dewarping. However, only mildly lens-warped QR codes will be encountered in practice, and readers that handle those take up less storage than Google's EULA.
  • Scan both sides of an ID and your face from multiple angles, to be sent to some "partners" for matching.
5

You reached the end