/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 obem.be
Re: Passkeys
| | janko.io
Passkey Authentication with Rodauth | Janko Marohni?
2.1 parsecs away

Travel
| | Passkeys are a modern alternative to passwords, where the user's device performs the authentication, usually requiring some form of user verification (biometric identification, PIN). Passkeys are built on top of WebAuthn specification, which is based on public-key cryptography. Keypairs are created for each website, and the public key is sent to the server, while the private key is securely stored on the device. This makes passkeys:
| | textslashplain.com
Passkeys - Syncable WebAuthN credentials - text/plain
2.5 parsecs away

Travel
| | Passwords have lousy security properties, and if you try to use them securely (long, complicated, and different for every site), they often have horrible usability as well. Over the decades, the industry has slowly tried to shore up passwords' security with multi-factor authentication (e.g. one-time codes via SMS, ToTP authenticators, etc) and usability improvements (e.g....
| | jonwillia.ms
Two-Factor Authentication for OpenBSD / Jon Williams
2.5 parsecs away

Travel
| | Notes on personal projects
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
18.0 parsecs away

Travel
| SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.