17a. Reject prompt to set up a pass key.
this post was submitted on 09 Mar 2025
1296 points (98.6% liked)
Microblog Memes
6860 readers
1781 users here now
A place to share screenshots of Microblog posts, whether from Mastodon, tumblr, ~~Twitter~~ X, KBin, Threads or elsewhere.
Created as an evolution of White People Twitter and other tweet-capture subreddits.
Rules:
- Please put at least one word relevant to the post in the post title.
- Be nice.
- No advertising, brand promotion or guerilla marketing.
- Posters are encouraged to link to the toot or tweet etc in the description of posts.
Related communities:
founded 2 years ago
MODERATORS
Passkeys aren't so bad. Just switch to a password manager that stores them for you, preferably a self-hosted one if you're technically inclined.
Take my upvote because you made me laugh; however, in all reality pass key is more secure, and should be used when available.
2 seems simple, but every site uses a slightly different variation for opt-in, but every variant is based on your lizard brain being tempted to click accept. The sites that make you scroll through 938 'legitimate interest" partners to get the "reject all" option are particularly shit.
Green button good, red button bad.
load more comments
(1 replies)
Alternative to steps 6 through 17: refuse to use any webstore that doesn't allow for guest check-checkout.
I know that 2FA is not that convenient, but it greatly improves security. Especially for users who use the same email password combination for multiple accounts
But security tho! Security theater is actually super useful!
Actually last time, I clicked on the wrong button on Amazon and the item have been ordered in one click. Obviously that wasn't what I wanted to do and needed to cancel it which wasn't a one click action.
Amazon: we saved your shit just click quick buy
I hate Amazon as much as everyone but they win because they make it easy and have good return policies and shipping. People care more about things being easy than being the cheapest.
I'm pretty sure we could make this into a satirical puzzle game.
You would defuse a connected bomb by remotely shutting it down through an awful mobile app.
IMAP and/or Authenticator skips step 8 to 14.
How does an authenticator help here?
Maybe autocorrection on "Authentik".