HN user

tossitawayplz

34 karma
Posts1
Comments10
View on HN

The first time I got asked by a site if I wanted to use a passkey I immediately googled what they were and... never really found the answer, not in the 5mins I devoted to being distracting from my task at hand anyway.

"magic fairy dust to login to apps." is the most accurate description I've seen.

Unlike a password or a TOTP token, I know how those work, I know its my responsibility to keep track of them. If my passkey is on my phone what happens if I lose my phone? Do I need a unique passkey per device? How do I rotate them? What if a device gets stolen?

I'm so glad I'm not alone in thinking these are so poorly explained.

Not sure if this is a joke or not, but I have heard of women actually making money selling JUST feet pics. Is it really that popular of a fetish? Or are the people with the fetish just willing to pay a ton for it? Genuinely curious and this is probably the wrong place to even ask...

OAuth for all 27 days ago

And I also trust myself to keep my secrets better than this whole pretend security theater too.

I've never worked at an organization that handled their user's data/privacy/security even remotely close to how I handle my own and I wouldn't even consider myself all that paranoid. I have worked for some companies that really really should care too - there's just no incentive to really care and those in the org that try too do so will get ignored.

The data breach letters I get in the mail a few times a year back me up on this.

OAuth for all 27 days ago

its safer for most people to have a login that just works, even at the cost of some privacy.

Respectfully, I disagree in a time when all your data is being slurped up and resold constantly I hate any additional costs to my privacy.

People trying to remember passwords is a pretty bad security situation.

But that's their problem, not mine. I'm an adult and I use a password manager.

t-shirts on instagram get me a lot, I also get ads for Temu for things that look interesting (Weird tech gadgets usually) but I refuse to use any site that forces me to do some stupid "spin the wheel for a coupon gag" every time I visit so have never actually even looked at an item on Temu. I also get extremely well tuned ebay product ads on instagram but I don't usually buy anything through that flow (I poke around on ebay enough on my own...)

At this point (despite being remote for 10+ years) I'd settle for non-WFH. I've looked into a lot of the trades to see if anything might be a fit for me, and like you, I realized I'd be starting all over (many require an internship/training period too.)

I can do contracting for an ex-employer too and considered that as I can do what I want how I want in that case but, it feels risky and there's health insurance complications because... US