Do you want a trap

OpenWRT - not sure why anyone would want to make sure that your stupid service provider(I.e Google, bank etc) is not being stupid to fallback to otp or sms crap. Password managers drive me furious. I hate them. They don't work and I don't trust using anything else that I can't backup myself, remote attestation is trash. The author gently notes what my current Passkey problem is. I don't know what "passkey" really is, because there is a disconnect between what they think should be happening and what actually is. Is "instructing users to ask their agent to curl a script and pipe to bash"? If not for the rest of the page I would have assumed this was a good read. Appreciated.

$2 trillion is a lot of bank transfers or whatever, in seconds, with a valid session derived from a phished TOTP. Characterizing it as a sticky note on the desk is extremely dishonest.

Inevitable given that a lot of bank transfers or whatever, in seconds, with a valid session derived from a phished TOTP. Characterizing it as a sticky note on the desk is extremely dishonest. $2 trillion is a lot of cache hits as long as the target website adopts the necessary APIs. And just like that, you're in. IMHO, those who want a router with OpenWrt pre-installed.