@rmondello@hachyderm.io
@rmondello@hachyderm.io avatar

rmondello

@rmondello@hachyderm.io

💚 Friend
🏳️‍⚧️ Trans, nonbinary, they/them
🔑 Pass{keys, codes, words} at Apple
🧛🏻‍♀️ It’s not a phase
🦔 Speedrunner

This profile is from a federated server and may be incomplete. Browse more on the original instance.

rmondello, to random
@rmondello@hachyderm.io avatar

So, what’ll support passkeys first? Bluesky or Mastodon? Whichever it is will have all of my love.

rmondello, to random
@rmondello@hachyderm.io avatar

It is quite the thing to present whatever this is as a privacy feature.

rmondello, to random
@rmondello@hachyderm.io avatar

Huge day for passkeys!

Starting today, you can set up a passkey for your Google account. At this stage of the industry-wide transition, setting up a passkey doesn’t invalidate your password, so it’s 100% safe to set up. https://blog.google/technology/safety-security/the-beginning-of-the-end-of-the-password/

rmondello, to random
@rmondello@hachyderm.io avatar

iOS has an entire facility for third-party credential managers to plug into to be a data provider for passkeys.

Some third-party credential managers have instead decided to overwrite the JavaScript API in web browsers for passkeys and security keys, making it difficult for users to use the OS functionality, causing user experience havoc.

I’ve made my thoughts on this reckless behavior clear to them and will do what I can to fix this situation up. https://macaw.social/@april/111121055176419392

rmondello, to random
@rmondello@hachyderm.io avatar

If you can drop a single device in a lake and lose your credential, it’s not a passkey. Passkeys are backed up and synced across your devices to deliver a great and safe user experience, while also eliminating phishing.

If it’s device-bound, it’s not a passkey. :)

rmondello, to random
@rmondello@hachyderm.io avatar

iCloud Keychain is end-to-end encrypted. It’s a safe place for your passwords, verification codes, and passkeys.

rmondello, to random
@rmondello@hachyderm.io avatar

This is probably the most important piece of writing I’ve read in a year. I encourage every single one of you to read it. https://www.thegauntlet.news/p/how-the-press-manufactured-consent

rmondello, to random
@rmondello@hachyderm.io avatar

‼️🔑 macOS Sonoma brings Apple’s password manager to Google Chrome, Microsoft Edge, and other browsers using their extensions stores with the “iCloud Passwords” browser extension.

You can AutoFill passwords and one-time codes, save new passwords, and right-click QR codes to set up code generators.

If you’re running the macOS Sonoma public or developer beta, you can try it right now!

Chrome: https://chrome.google.com/webstore/detail/icloud-passwords/pejdijmoenmkgeppbflobdenhhabjlaj
Edge: Coming soon.

[*] I am not breaking news here; this is public information.

Screenshot of Google Chrome on Mac with a Twitter login page. The iCloud Passwords extension is installed and there is an AutoFill suggestion for a one-time code.
Screenshot of Google Chrome on Mac with a GitHub Security settings page. The iCloud Passwords extension is installed and when right-clicking on the QR code, there’s a “Set up Verification Code” menu item.

rmondello, to random
@rmondello@hachyderm.io avatar

Passkeys will be importable and exportable, cross-device, and across passkey managers. They aren’t at this time, but they will be. It’s something that’s being defined and designed.

rmondello, to random
@rmondello@hachyderm.io avatar

> Aren’t passkeys just a more standardized two-factor auth?

Not quite. Forget about factors for a moment. Passwords are broken: they’re phishable, susceptible to server leaks, and almost all of them are weak and reused across websites because they’re created by people.

Passkeys directly addresses these security flaws while improving usability: humans don’t have to “create” them.

I explain passkeys in a 4 minute video segment here: https://developer.apple.com/videos/play/wwdc2022-102/?time=2638

https://social.seattle.wa.us/@brandonlivesin/111005603199723471

rmondello, to random
@rmondello@hachyderm.io avatar

Would it be a little too extra to bring a tiny roll of electrical tape in my standard luggage to block annoying LEDs in a hotel room? Has anyone done this?

rmondello, to random
@rmondello@hachyderm.io avatar

I have been dealing with a health episode since just after Christmas. Involves COVID-19 and unexpected complications, plus changes to my health insurance leaving me uninsured during a medical emergency.

Anyway, if you haven’t heard from me recently, that’s why! lmao

rmondello, to random
@rmondello@hachyderm.io avatar

hey, anybody have opinions on facebook joining the fediverse? I haven't been able to find any

rmondello, to random
@rmondello@hachyderm.io avatar

something about Taylor Swift brings out the most unhinged parts of people

rmondello, to random
@rmondello@hachyderm.io avatar

Yes, you heard that right! iOS 17 and macOS Sonoma add support for sharing passwords and passkeys in groups with friends and family.

  • share passkeys, passwords, verification codes, and notes
  • edits and updates seamlessly sync between group members
  • end-to-end encrypted
  • share with family, friends, and other close contacts
  • the password manager that’s built in to iPhone, iPad, and Mac is free to use and easy to switch to :)
rmondello, to random
@rmondello@hachyderm.io avatar

When I say that passkeys are and will be interoperable, I’m extremely serious about it.

This year:

  • Chrome, Firefox, and other browsers on macOS can save and use iCloud Keychain’s passkeys (they need to adopt this)
  • Third-party password managers can participate in the ecosystem on iOS, iPadOS, and macOS
  • The passkeys from those third-party managers will also be usable by all web browsers

Here’s a thread with more information: https://hachyderm.io/@rmondello/110509448037547578

Please spread the word!

rmondello, to random
@rmondello@hachyderm.io avatar

Although I love Mastodon, a fun, Friday reminder for folks also on Bluesky that I’m on there as (@)rmondello.com, sans parentheses.

rmondello, to random
@rmondello@hachyderm.io avatar

I don’t know who needs to hear this, but passkeys are a replacement for passwords — a step up in usability and security over passwords synced in a password manager. Passkeys are not phone-based security keys, or some other easy-to-lose, device-bound credential.

rmondello, to random
@rmondello@hachyderm.io avatar

everything in totk wants me to die

rmondello, to random
@rmondello@hachyderm.io avatar

I’m on vacation for the next week. :)

(So if I don’t reply to some question about passkeys or something, that’s why.)

rmondello, to random
@rmondello@hachyderm.io avatar

Passkeys are the first shot we’ve realistically had as in industry at replacing passwords as the default credential on the web and in apps.

I am ecstatic about the momentum that they have.

Recently:

  1. google.com, icloud.com, and apple.com shipped support for signing in with passkeys
  2. iOS 17 shipped first-class support for third-party passkey managers plugging their data into all flows

And in November, maybe, Firefox will support passkeys, including iCloud Keychain’s! This is happening!

rmondello, to random
@rmondello@hachyderm.io avatar

People of Mastodon, lend me your energy and willpower. I need all of you — each and every one of you — to yell at me to go to sleep.

When you read, “all of you”, you probably thought that I meant, “a lot of you”, but that’s not what those words mean.

Please. Tell me to do it and do not stop.

rmondello, to random
@rmondello@hachyderm.io avatar

feel like pure shit just want her back

rmondello, to random
@rmondello@hachyderm.io avatar

My most cancelable opinion?

That games in The Legend of Zelda series don’t happen in any kind of coherent timeline. Instead, they’re just tweaked and mutated versions of the same rough outline of a legend.

rmondello, to random
@rmondello@hachyderm.io avatar

The bravest people I’ve ever seen are the people who wear AirPods Max in the rain.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • mdbf
  • everett
  • osvaldo12
  • magazineikmin
  • thenastyranch
  • rosin
  • normalnudes
  • Youngstown
  • Durango
  • slotface
  • ngwrru68w68
  • kavyap
  • DreamBathrooms
  • tester
  • InstantRegret
  • ethstaker
  • GTA5RPClips
  • tacticalgear
  • Leos
  • anitta
  • modclub
  • khanakhh
  • cubers
  • cisconetworking
  • megavids
  • provamag3
  • lostlight
  • All magazines