Skip to content

Comment on Pass-ta-key attacks steal passkeys instead of passwords

Comments

"malware already present on a Windows endpoint take over accounts protected by Google-synced passkeys in Chrome"

breaking news! If you completely control a computer, you can completely control a computer! This means doing anything the computer can do, such as logging in with passkeys, and using "passkey sync" functionality to sync passkeys.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.