This is probably fine then

FBI Uncovers Al-Qaeda Plot To Just Sit Back And Enjoy Collapse Of United States.

We don’t allow genocide apologists here, and don’t care what current xenophobic / racist demonization campaign you liberals are currently on. You’ll blame everyone but yourselves for the problems you’ve created.

Basically

That’s the exact same situation that made Marx say: “First as tragedy, then as farce”.

Europe is stuck in a mid-1800s liberalism loop.

I’m referring to these new projects coded by AI from scratch, not existing projects which have an occasional LLM contribution.

People are submitting a lot of these AI projects recently.

I’m mostly referring to these new projects that are AI coded from scratch, not existing projects that might have some LLM contributions.

One of the main problems, is that US liberals have no historical memory of the scale of atrocities committed by their party. Once they learn that history, they unavoidably have to come to terms with the truth that the US is a one-party state, with the democrats playing the controlled opposition wing, and the electoral contest is nothing more than theatre, or a rigged game at a casino where the house always wins.

Even just a cursory glance over the history of some of their recent leaders, like Obama, Biden, or Harris should be enough.

I don’t doubt that these incentives also drive the push for passkeys, but passkeys are much more opaque and tightly integrated with the OS, and is thus more vulnerable to centralization.

I’m not sure what you mean by integrated into the OS. I use a FOSS password manager on android (keepassdx), storing passkeys both for apps and websites. When the browser or an app asks for a passkey, android uses the password filling service you’ve chosen (in my case keepass), and it loads up, no differently from when there’s a password prompt. I’m not sure how it works on other platforms like iOS, windows, or linux, but at least on android, you can use a FOSS password manager not integrated into the OS.

They are. Authy is the biggest offender I know.

Specific sites aren’t locking down TOTP, this seems to be an EEE scheme of Authy specifically, since as you say the TOTP codes provided by sites still work with other authenticators. I’m referring to the case where say, amazon forces you to use their app to login, or creates their own custom TOTP or passkey app, and won’t let you log into their site without it, and then you have no control over your login method or codes.

I’m sure a lot of people (like myself) would refuse to install a special custom TOTP app just to be able to use one site. They’re only hurting TOTP adoption by doing that, and thus increasing the amount of support resources they need to allocate to account hacking / hijacking.

I’m sure there are other companies too willing to go against their economic interests for various reasons, but they’re going to be in the minority.

Once you can correctly answer the question you responded to, you’ll see why its against their material interests to EEE logins, whether its TOTP or passkeys.

No, but the “normal, worst case” usage of passwords is still far worse than even that case. Most people just re-use the same password for everything. This is why almost all companies use phone numbers and text messages as a totp now.

If we’re comparing worst usage of passwords vs worst usage of passkeys, passkeys still wins.

Question: Why did these corps implement TOTP? You should be able to answer this from an economic perspective of them trying to save money.

Another question: why aren’t these corporations locking down TOTP to restrict them to their own validator apps, in the same way you’re proposing that they might do for passkeys?

That’s entirely optional and not forced. You can use FOSS password managers that store your passkeys, that can log into all those services.

If you’re referring to proprietary password managers (IE like google or apples), then that concern applies equally to all the passwords you’re storing with them. So that concern is not specific to passkeys.

I’m using a FOSS password manager for like 6+ passkeys right now, on some of the biggest sites. So this is just demonstratably false.

but in practice they’re being pushed as a way to increase lock-in

Which ones are doing this? Give specific examples of sites that are forcing you to use a specific TOTP or passkey validator.

Those two categories aren’t really meaningful, but even if you consider them to be, passwords (apart from a master password for your password manager) also should never be in the “things you know” category, because then it means you’ve memorized them, and are not using a password manager to generate completely random ones.

And unless you’ve got an incredible memory that can memorize unique passwords like “+28x@!8eaEak!” for 10+ sites, then you’re likely using a pattern or single password than can be compromised.

If you use a self-hosted password manager like bitwarden, then its there. If you use a file-based password manager like keepass, then you can use any syncing method you choose, and its no different from passwords.

Passkeys also aren’t lock-in. You control them, and your FOSS password manager likely already supports them.

Passkey is stored on propietary, trust me bro, “we will never share this with the NSA or FBI” Apple or something account where you can’t export them

No. Most FOSS password managers support them, even keepass and bitwarden. You control them, you can export them as you wish, and even use them across multiple devices. I know because I do this.