Comment on Google will now make passkeys the default for personal accounts
Nolegjoe@lemmy.world 8 months agoIf that’s the case, then a bad actor could spam someone’s phone with notifications. All they’d need is a username.
Or, like my mum, you don’t read what the notification says and just hit ‘OK’. Now you’ve let someone into your account without realising
a_fancy_kiwi@lemmy.world 8 months ago
Shit. Good point. According to this blog at 1Password, Bluetooth can be used to have one device verify another for a service. So I guess if the public device has Bluetooth, it’s possible 🤷♂️
Natanael@slrpnk.net 8 months ago
There’s more ways such as scanning a Qr code to establish a connection from the app to the computer, or by presenting a number on one device which must be entered on the other