this post was submitted on 14 Oct 2026
129 points (74.9% liked)

Privacy

51434 readers
411 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago
MODERATORS
 

A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] GamingChairModel@lemmy.world 1 points 1 day ago (1 children)

I think you're mixing up compromise of an account with compromise of the data associated with that account.

If a particular piece of data is accessible to people of a dozen accounts, compromise of any of those accounts potentially compromises the data. That's a legitimate concern for people who want certain data secured, whether other accounts with access are also secure. In some cases, it may be best to have an authentication policy that provides a baseline level of protection even for the most clueless users, rather than a system where you're able to secure your own account.

[–] jdr@lemmy.ml 2 points 1 day ago (1 children)

I follow you, but if we can impose passkeys on the security-inept people we are forced to give our sensitive data to, couldn't we instead force them to use good security?

[–] GamingChairModel@lemmy.world 2 points 1 day ago (1 children)

It's been like 25 years since the security world basically moved on from assuming that users could be trusted to act securely. We gotta design processes and protocols that keep things secure even with people who have bad habits.

I can secure my email, but every email I send or receive touches at least one other mailbox I don't control, of some other user. Same with text messages, social media posts, etc. The digital world we use has a billion overlapping people, some with escalated privileges as employees or admins or mods or whatever. We can't make them perfect, so we should design systems that work well even with imperfect people.

[–] jdr@lemmy.ml 2 points 1 day ago

I couldn't possibly argue with that