Firefox supports WebAuthn (no more passwords)

[rekees4300]

Today (5/9/18) Mozilla released Version 60 of their Firefox browser. It supports a new technology that may in a few years eliminate the need to use passwords to access websites. Can we all agree that would be a good thing!? :thumbsup:

Firefox moves browsers into post-password future with WebAuthn tech - CNET

 

[MossRoad]

Today (5/9/18) Mozilla released Version 60 of their Firefox browser. It supports a new technology that may in a few years eliminate the need to use passwords to access websites. Can we all agree that would be a good thing!? :thumbsup:

Firefox moves browsers into post-password future with WebAuthn tech - CNET

It's just a matter of time before the technology is cracked. Older devices don't have fingerprint ID or facial recognition. Some don't have USB ports. And, you'll loose your key fob, too.

Remember:

- Credit cards with raised numbers and carbon copy stealing?
- Flat cards and magnetic strips were supposed to eliminate that threat. Went to skimming to steal the magnetic strip data.
- Chipped credit cards were going to solve skimmers that read the magnetic strip. Now they have shimmers that read the chip. Mine got shimmed a few months ago at a gas station.
- Just tap and go! hahaha RFID readers.
- Facial recognition software..... has been fooled with a baseball hat and IR Leds.
Look out, Face ID: This hat can fool facial recognition
- Fingerprint scanners... probably the best bet, however... who just touched that thing?



Let's face it, we're doomed, Tommy!

 

[rekees4300]

Lots of barriers, that's for sure, but the world keeps moving forward. I use a password manager called Keepass and there are many others. Until something better like WebAuthn becomes popular and reliable at least the password managers eliminate the need to manually type in credentials.

 

[vvanders]

It's just a matter of time before the technology is cracked. Older devices don't have fingerprint ID or facial recognition. Some don't have USB ports. And, you'll loose your key fob, too.

Remember:

- Credit cards with raised numbers and carbon copy stealing?
- Flat cards and magnetic strips were supposed to eliminate that threat. Went to skimming to steal the magnetic strip data.
- Chipped credit cards were going to solve skimmers that read the magnetic strip. Now they have shimmers that read the chip. Mine got shimmed a few months ago at a gas station.
- Just tap and go! hahaha RFID readers.
- Facial recognition software..... has been fooled with a baseball hat and IR Leds.
Look out, Face ID: This hat can fool facial recognition
- Fingerprint scanners... probably the best bet, however... who just touched that thing?

View attachment 553349

Let's face it, we're doomed, Tommy!

That stuff is all a stack above webauth. Webauth is based on public/private key crypto which is pretty robust and pretty much all ecommerce would disappear if it was breached(a long with a lot of other things).

It's all pretty standard in the private space(YubiKeys and the like). Most corporate VPNs already use some variant of this approach so it's not like this is something new that hasn't been tested on hostile networks/domains before.

 

[YLee Kioti]

Been using Keepass for decades. Just keeps getting better.

Sourceforge has great open source software.

 

[rekees4300]

Been using Keepass for decades. Just keeps getting better.

Sourceforge has great open source software.

What I like about Keepass is the credentials are stored locally under MY control. None of this "cloud" nonsense where IMO hackers can steal it.

You are right about Sourceforge, the best software I use (on a daily basis) is called FreeFileSync. It's reliable, free, user-friendly, and 100X faster than conventional backup methods!