SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Passkey enrollment security in practice

0
·2 views

Passkeys close a lot of phishing risk at login, but they also move pressure to enrollment. The hard part is simple: if an attacker gets into an account once through a weaker path like a password, SMS OTP, or a recovery flow, they may not need to steal anything. They can just register their own passkey. That changes the cleanup model. A stolen password is a copied secret, so a reset invalidates it.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Polymarket Trading Bot: I Overengineered My Polymarket Sniper — Then Cut It Down to One Entry Strategy

I spent the last few weeks building a Polymarket TWAP End-Cycle Sniper. The original version had multiple entry strategies, several confirmation layers, and a fairly complicated risk engine. After about two weeks of real-market testing, I ended up removing most of it. The interesting part was that the simpler version gave me a much clearer trading signal. This post explains what I changed, what I learned, and the entry condition I am currently testing.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

I Taught My Laptop to Whisper Bird Names So I Could Finally Look Up

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 1: Touch Grass Every time I try to identify a bird with an app, the same thing happens. I hear a call, pull out my phone, wake the screen, tap record, and by the time the app answers, the bird is gone and I'm staring at a glowing rectangle instead of a tree. So I built Trailbird, a bird call identifier with almost no screen. The laptop goes in my backpack, one earbud goes in my ear, and I just walk. When it hears a bird, a calm voice says one sentence: "Northern cardinal, probably in the shrubs to your left." If it's a sp

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Touch Grass, a website that Touch Grass, a website that runs an open-weight model on your phone to get you outside

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 1: Touch Grass What I Built Tap 📍 Use my location. You get the best 2-hour window before sunset (scored from the hourly forecast), real parks, gardens, trails and viewpoints nearby on a map, and a short plan with a mini mission ("spot a crow and three kinds of leaves"). It's for anyone who opens their phone "for a minute" and looks up two hours later. The screen part takes about a minute. The rest happens outside.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Touch Grass Planner: Local AI for Your Next Outdoor Reset

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 1: Touch Grass I built Touch Grass Planner, a local AI app that helps people choose a real-world activity when they want to step away from the screen. Instead of asking a closed API for recommendations, the app uses an open-weight sentence-transformer model running locally on the machine. The user enters a mood or goal such as “I want a calm walk with birds and fall colors,” and the app recommends a few outdoor options based on weather, time of day, energy level, and intent. This is designed for people who want a small re

0 comments Read more at DEV Community