• 0 Posts
  • 90 Comments
Joined 2 years ago
cake
Cake day: November 4th, 2023

help-circle










  • Yup.
    The problem is, how do you guarantee access control that works offline?

    DVD DRM was based on a pretty simple system that was easy to crack.
    HD-DVD (former blu-ray competitor) DRM was more advanced. Someone hacked a software player and extracted its decode key, which this was.
    The DRM was designed to be updateable so any discs manufactured after this leak would use different keys (and anyone using the software app that’d been hacked would need an update). That didn’t stop this key from working on every disc in existence at the time.

    That’s the problem with making software decoding available. It had to work offline, so you could have an authorized player software, and feed it any valid disk, and it’d Just Work. So even if you put a crypto enclave in the drive controller, the player software still needs its own way to authenticate itself to the drive.




  • Not even close.

    Passkey is a generic technology not specific to any vendor. While there are a few versions of it, the long story short is it uses an encryption key you have to authenticate you rather than a password. This makes phishing extremely difficult if not impossible.

    There’s lots of passkey implementations. All the major browsers have one built in with their included password managers. Most good password managers like BitWarden or 1Password also support pass keys. And if you want to be extra secure, the passkey can be an actual hardware token like a YubiKey.

    So yeah you see Google pushing passkeys a lot, and if you use Google password manager it will store your pass keys. But you also see Apple pushing it, and Microsoft also.