Hacker Newsnew | past | comments | ask | show | jobs | submit | dweekly's commentslogin

Passkeys are the 2026 answer. No (added) username, no password, no two factor SMS, no phishing.


Passkeys are auth garbage. Normal users do not benefit from overly complex auth.


You tap your finger and you're done. Faster than a password paste. How is that complex or difficult UX?


Too confusing for me, I don't get it. How do I record my login info on paper so my family can get in if I die?


I'm not a fan. But what Anthropic SHOULD have done is use plain ol' SSO. Google, GitHub, Microsoft, etc. logins with the option to do this magic link stuff. The third party auth providers would use passkeys at the user's discretion.


Don't they have Google SSO?


Until you lose your device or it breaks suddenly.


I store passkeys and totps in 1Password. I know it means there's no hardware protection of the secure element, but in return they're trivially synced across my devices.

I feel this tradeoff is worth it to me; certainly it is no worse than email or SMS as the second factor.


Chrome Sync, iCloud Sync. There are great answers for this.


Sure. But if you sync passkeys, are there any advantages apart from phishing protection?

The biggest advantage for me is using the hardware secure enclave, thus effectively getting a 2nd factor.


I'm going to be the obnoxious person who asks you to please create this leaderboard because you care and have a modicum of knowledge in this space.


The FAA just effectively grounded all drone flights. FDC 6/4375 NOTAM published two weeks ago makes it illegal for a drone operator to operate within 3000 feet laterally of any Department of Homeland Security mobile operation in the United States. But given that such locations are not published or marked, operators are typically in unmarked vehicles, etc - it is now impossible for any drone operator anywhere in the United States to be sure they are compliant with the TFR. (It's pretty clear this was published to deter filming of ICE agents in Minneapolis.)


I've begun an AI content disclosure working group at W3C if folks are interested in helping to craft a standard that allows websites to voluntarily disclose the degree to which AI was involved in creating all or part of the page. That would enable publishers to be compliant with this law as well as the EU AI Act's Article 50.

https://www.w3.org/community/ai-content-disclosure/

https://github.com/dweekly/ai-content-disclosure


How does one get involved?


Yay, I'd love to have your help!

1) Anyone can join the W3C group; you don't need to be a formal member of W3C!

2) What's dumb about the proposal itself? How could it better achieve its goals?

3) You can see some dialogue at https://github.com/WICG/proposals/issues/261 - what resonates and doesn't in the feedback and critique?


Hot saltwater is the worst substance on earth, excepting, maybe, hydrofluoric acid. You really don't want to cool things with ocean water over an extended period of time. And filtering/purifying it takes vast amounts of power (e.g. reverse osmosis).


My 4 Cylinder Diesel Volvo Penta is cooled by sea water. There is an elbow that may have to be replaced every few years,


I wonder why they did not start with a freshwater body.



I heard Germans hate American root beer because they think it tastes like toothpaste and that very thought ruined root beer for me for a few years (until a sunny day when I was just dying for a root beer float and it absolutely hit the spot).


German here. Root beer does INDEED taste like toothpaste. Disguting. :)

We Germans drink Malzbier, which is equally unhealthy, but at least it tastes somewhat OK.


I’ve tried Spruce Beer before and my brain rejected it for similar reasons - it tasted like house cleaner. If they’ve got anything that has that scent that’s dangerous, I imagine the brain wires similarly :D


I used to think the same thing, hated root beer. The nasty flavor combined with the word root conjured up images of uprooted plant root balls covered in dirt. Yum yum. Then I had the alcoholic Not Your Father's Root Beer" and really enjoyed the flavor. What I don't know is the flavorings as both sassafras and sarsaparilla are used so it might be one or the other or perhaps a combination that tastes better.


It's true. You can find literally zero sodas, chewing gum or other candies that have the root beer taste in Germany.


My sister got some root beer at McD's once (London) and I tried some. It tasted like floor cleaner to me and I've never tried it again. Is that just McD's version?


There is a Swedish snus which tastes just like the smell of CRC 5-56. Not everyone loves it but boy it's nice. I have given up snus though.


Canadian here. I thought this was common knowledge.


Do they put sarsaparilla in their toothpaste?


If I had to guess, it's probably wintergreen or fennel. It's not the main note of root beer, but I could see it being similar.


I think one interesting context to consider in this is cloud repatriation. Economics that didn't really pencil out half a decade ago may be worth revisiting for a lot of organizations who now find that their actual bare metal needs are quite modest and can be well met by a few modern servers. The IOPS/$ graph here contrasting on-prem w/cloud in particular is quite telling.


I've seen a lot of workloads that had multiple servers or large RAID'ed NAS devices get shrank down to a single server after a single NVMe could provide more than enough random IOPS.


I’m not disagreeing with this necessarily, but I do think a lot of people underestimate the costs of actually doing on-prem to a professional standard. You’ll almost certainly have to hire a dedicated team to manage your hardware, and you’re off in the woods as far as most of the rest of the world’s operating stack - an awful lot assumes you’re on EKS with infinite S3 and ECR available. It’s doable, but it’s not drag & drop - the cloud providers are expensive, but they are providing a lot.


On slimness: wouldn't an alternative implementation be to "do the Magic Mouse" and put the USB C port on the back of the phone instead of the edge? Alternatively I could imagine MagSafe alignment / charging magnets plus an NFC like inductive communication (or contact pads) to allow for a range of "snap on" peripherals for phone backs that could be implemented on devices thinner than a USB C port.


No, the connector is longer than it is tall.


A solid refutation to the first point but not the second suggestion.


If we really engineer around the same connector with extra thinness the best bet could be on partly open ports: if the phone covered 75% of the barrel circumference by left out the other 25% exposed I assume it would still work.

I see it through the same lens as the cassette players like the Toshiba KT-AS10 that left part of the cassette outside for the absolute minimal footprint:

https://qth.tzpfsokx.cloud/index.php?main_page=product_info&...

PS: there is a mini headphone jack standard, but I'm not sure it's any good. At least it would clear the DAC problem, just still need a dongle.


There are two reasonable-sounding takedowns of any critique of an industry:

- You haven't worked in that industry so don't know what you're talking about, so be quiet.

- You worked in the industry that you are now critiquing and benefited from it, so be quiet.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: