@tychotithonus As long as we can make the original text-based password obsolete and make the two factors something like this plus a yubikey then that’s a win. #KillThePassword

Yet another quick rant about passwords....

The password is such a poor security measure that nearly all accepted and enforced standards state to use a second authentication factor that is NOT a standard. Stop yelling about SMS as a poor second factor unless you also yell about the FIRST factor. Think about it. Kill the password. Hardware tokens coupled with a biometric - two great authentication factors we all accept now, way better than SMS which is way better than the password.

If you're going to argue, bitch, and complain about which non-password authentication methods are best, great. Let's just agree to kill the password

#infosec #multifactor #KillThePassword

In just this one week, I was prompted by CVS.com and eBay to set a PassKey. I then went to GitHub and enabled PassKeys on both my GitHub accounts. The future is password-less! #KillThePassword

In just this one week, I was prompted by CVS.com and eBay to set a PassKey. I then went to GitHub and enabled PassKeys on both my GitHub accounts. The future is password-less! #KillThePassword

WebAuthn is now an official W3C standard. Really looking forward to build passwordless authentication with it and #dashlane
#w3c #webauthn #passwordless #authentication #killthepassword

https://www.w3.org/2019/03/pressrelease-webauthn-rec.html.en