RT by @elukewalker: How to use iPhone's Security Keys feature to protect your Apple ID | ZDNET https://www.zdnet.com/article/how-to-use-iphones-security-keys-feature-to-protect-your-apple-id/

blog.cryptographyengineering…

bleepingcomputer.com/news/se…

Question for WebAuthN experts here: if we control the IDP and the Authenticator app, could it be possible to works with regular PKI certificate? Some kind of PIV-D usage where a trusted device with cert become a managed passkey token for example. @Serianox_ @LoginLlama ?

nsa.gov/Press-Room/Press-Rel…

singularityhub.com/2023/10/0…

Post Quantum? We still can’t get RSA right. New Marvin attack revives 25-year-old decryption flaw in RSA https://www.bleepingcomputer.com/news/security/new-marvin-attack-revives-25-year-old-decryption-flaw-in-rsa/

theverge.com/2023/9/29/23895…

theverge.com/2023/9/21/23884…

Still waiting for desktop login with Fido for consumer accounts. https://www.microsoft.com/en-us/security/blog/2023/09/21/new-microsoft-security-tools-to-protect-families-and-businesses/

bleepingcomputer.com/news/se…

zdnet.com/article/passkeys-w…

In the hopes to grow @loginllama from zero, I'm working on a new strategy. It's pretty simple. 1. Add content - through blog posts 2. Reach existing markets - through language libraries and plugins 3. Add new features regularly to become more of a powerful value preposition

bleepingcomputer.com/news/se…

bleepingcomputer.com/news/se…

R to @Serianox_: It will be in the next public draft.

R to @LoginLlama: Not sure which feature you are talking about, but I didn't have time since january to read anything from the working group, so I've probably missed everything. :D

R to @LoginLlama: Okay, thanks for your insights. 😊 So it would require credentials to use credProt=1 in CTAP 2.1, which is never the default to value, so no platform will bother implement any sort of credential probing for CTAP2.1.

R to @LoginLlama: In CTAP2.2 there will be a way to pair an authenticator with a platform so it can retrieve credential info for the autofill UI.