Hacker News: zdp7

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Wed, 29 Jul 2026 22:39:43 +0000

To switch off, just stop using Keepass. If you want want delete the entry on the site. You don't need to, since your Keepass file should be secure and passkeys are designed allow multiple for a site. Passwords are not equal to passkeys and not difficult to add. Everyone seems to think you need to create new passkeys for all your websites. You don't, add them as you go. The hassle of adding it should be less than using a password to login.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Thu, 23 Jul 2026 19:41:43 +0000

If you want to change it maybe tough. It doesn't have to be. Bitwarden has an open source self hosted option(you can also use their service), that can be set as provider in Android and Windows 11. KeepassXC is an option everything is in your kdbx file. Passkeys are so much more convenient and secure. If you do get stuck having to migrate, you can use your password (I would actually prefer just using multiple passkeys.) You don't need to do them all at once. Your average user is probably using whatever their device offers or nothing at all. I'd argue anyone that is tech savvy shouldn't be using either Google or Apple. If your account is disabled, you probably just lost anyway to retrieve your account unless you use a separate email address. I recently discovered cross device auth when a device I had a passkey was able to open my account on my pc that didn't have a passkey. TLDR ther are simple solutions that solve the 'lock in' issue.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Thu, 23 Jul 2026 17:46:02 +0000

I have to think people aren't doing any research. Both Android and Apple sync your passkeys to your account. You can toss all your devices in a wood chipper, buy a replacement and still have access to all your passkeys.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Thu, 23 Jul 2026 16:29:45 +0000

1) Install a keepass client and use it for passkeys.

2) See #1

3) See #1

KeepassXC supports passkeys. They suggest a couple mobile apps that also do.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Thu, 23 Jul 2026 16:05:19 +0000

You aren't considering all the advantages of passkeys.

Passkeys only work on the domain they were created for. Password managers usually default to providing the password of the current website, but nothing stops you from pasting that in at any site.

There is no danger to the credential db being stolen. The website only has your public key.

A website using passkeys can support cross device authentication which allows you to login to on a computer without it ever seeing your credentials.

I'm sure that isn't a complete list. My last point, despite all the comments here, there is no vendor lock in. Bitwarden provides an open source self hostable option. On both Android and Windows 11, you can change your passkey provider to Bitwarden. A proper passkey implementation, should allow multiple passkeys to provide access. My bank does exactly that.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Thu, 23 Jul 2026 00:50:38 +0000

Passkeys have an advantage in that the server doesn't have your password and every passkey should be unique.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Wed, 22 Jul 2026 18:34:01 +0000

This is one of the key security features of passkeys. I did a little searching and the work around is to do a standard fake website that prompts for your standard credentials. That should be a fairly simple fix. Require access from a new device to be authorized from another source with an explanation that they will never request this info.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Wed, 22 Jul 2026 18:20:02 +0000

Unfortunately probably implementation specific, but you don't always need to have multiple passkeys. There is cross device passkey login. I had this occur in the last couple weeks. Evidently I had created a passkey on my phone. Logging into that site on my PC, it identified that I had a passkey and allowed me to authenticate using my phone.

New comment by zdp7 in "Passkeys were invented by engineers with zero understanding of consumer brain"

zdp7 — Wed, 22 Jul 2026 17:34:26 +0000

There is security value. A passkey will not work anywhere except the actual website. Fake look a like sites can't get the credentials. Evidently they can trick you into authorizing their device.

New comment by zdp7 in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"

zdp7 — Mon, 01 Jun 2026 21:05:56 +0000

If you were the FBI, much higher than you are assuming. Read up on https://en.wikipedia.org/wiki/Bojinka_plot . The FBI had the plans for the foiled first attempt for 9/11.

New comment by zdp7 in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"

zdp7 — Mon, 01 Jun 2026 17:07:22 +0000

Pretty sure you are mistaken. Look up public policy violations. Typically you can't negotiate away rights

New comment by zdp7 in "I moved my digital stack to Europe"

zdp7 — Fri, 15 May 2026 09:07:29 +0000

The US isn't being single handedly dismantled. The damage is being done by thousands. You are fooling yourself if you think it can't happen in the EU. People have been working on this for decades. Obviously if it were to happen it's not going to be one rogue, but multiple right leaning countries. As long as you believe it can't happen, the easier it becomes to do it.

New comment by zdp7 in "Meta in row after workers who saw smart glasses users having sex lose jobs"

zdp7 — Thu, 30 Apr 2026 16:30:18 +0000

Many security cameras have the ability to record audio. Depending on where you are, it might be illegal to use it. All the cams I have purchased have it. That would include ReoLink and a recommended model from the Frigate site.

New comment by zdp7 in "Bodega cats of New York"

zdp7 — Fri, 24 Apr 2026 16:59:43 +0000

Cat owners have significantly lower cardiovascular deaths. Children growing up with a cat have an almost 50% lower development of asthma and allergies. They reduce stress and depression.

https://pmc.ncbi.nlm.nih.gov/articles/PMC3317329/

New comment by zdp7 in "Bodega cats of New York"

zdp7 — Fri, 24 Apr 2026 01:46:22 +0000

Less than 0.5% of people are at risk of anaphylaxis from cat allergies. Since you brought up peanut allergies, it's relevant to point out that we haven't banned peanuts. It sucks that you and others suffer, but getting rid of cats doesn't make sense when you can ask if there are cats around, much like people with peanut allergies ask about the presence of peanuts.

New comment by zdp7 in "Bodega cats of New York"

zdp7 — Fri, 24 Apr 2026 01:18:06 +0000

The solution isn't get rid of cats, it's don't lick your hands after changing the litter box. Especially since cat feces isn't the most common source. Under cooked meat is.

New comment by zdp7 in "Bodega cats of New York"

zdp7 — Fri, 24 Apr 2026 01:08:33 +0000

You don't get toxoplasmosis from touching a cat. You get it from touching cat feces and then ingesting it. The most common avenue of infection (in the US at least) is consuming raw or undercooked meat. Considering when my wife was pregnant, she asked our Doctor about it. His recommendation was she should not be the one to clean the litter box. So yeah, avoid cat feces and if you can't wash your hands. We don't need to get rid of cats. Also make sure the meat you eat is cooked properly.

New comment by zdp7 in "Tim Cook's Impeccable Timing"

zdp7 — Tue, 21 Apr 2026 19:08:58 +0000

> Japan was indisputably an ally of the US, whereas China has never been.

Except for the time we were indisputably not allies with Japan and were with China.

New comment by zdp7 in "New patches allow building Linux IPv6-only"

zdp7 — Sat, 04 Apr 2026 01:56:33 +0000

Address space isn't the only benefit.

I'll just leave this here if you want to find out https://www.catchpoint.com/benefits-of-ipv6

New comment by zdp7 in "New patches allow building Linux IPv6-only"

zdp7 — Sat, 04 Apr 2026 01:44:23 +0000

Maybe you don't need the addresses, but there are other advantages. If we made the move, I suspect we could give you the experience you want and the one I want. I personally do want to host my own services. My phone is configured to send my pictures to Google and my personal NAS. Centralized services mean you have to trust that provider. These days I don't. I intend to leave centralized services so I know my content isn't training AI or the doorbell isn't spying on me or my neighbors. But, no instead we should force everyone to share the same IP addresses and run less efficient routing.