• 0 Posts
  • 41 Comments
Joined 3 years ago
cake
Cake day: August 17th, 2023

help-circle



  • Your confusion stems from the bureaucracy, not the method. Even if it was ‘simple as’, the result is the same.

    Some doors yes, other doors you have to take the whole thing apart. I would say most are not ‘easy’. I don’t know the outcome, I think they were rekeyed because I was told to keep the lock even if I replaced it. I left that week for unrelated reasons and had my property manager deal with it.





  • Yeah, but they were somewhat reasonable about it. You could get new locks to prevent break-ins, but it took them a very long time to figure out what they were going to do. It was all brand new and the locks technically worked, so I guess they had to have meetings to figure out if they needed to sue or to buy new locks, change the design…or whatever the HOA does. They ended up telling everyone to keep their old locks and I think they just rekeyed them? I left during all that mess (not for that reason) so idk.


  • Actually, a lot of locks ARE the same. I lived in a brand-new complex years back, and everyone had the same lock and key. It didn’t take long for some kids to start breaking into other people’s houses, and since it was all under HOA owners couldn’t just buy mismatched locks.

    Then when I bought a 10 yr old home later, I was sitting at the house when some maintenance crew unlocked my door and walked right in. They tried to tell me I was squatting and it wasn’t until they realized they were to do work on my neighbors house. Went and checked with other neighbors and found out a handful of us all had the same keys of about 4 varieties. Ironically, there were even two families that knew this before then and they told us how they bought new locks - and found out that those too were the same key.

    So basically, if you buy a new lock, you should have it checked by a locksmith and rekeyed if needed.

    Edit: There is a lot of side discussion on this post. Feel free to inquire and discuss, but note that context was left out in a lot of places. I understand HOAs can be difficult, but the OP is about locks. Just be mindful that there is more to the story I did not detail.




  • Keep in mind, still discussing the underlying fundamentals and not the user experience.

    MitM attacks are frequently covered in white hat hacking, often after an actual event takes place. It is considered a third party attack, and it does break trust. It is a security threat, and to claim it doesn’t count is absurd. I’ve seen a few reports personally from internal, but I’m not at liberty to speak specifics about them. On the topic of replay attacks, TOTP is vulnerable, but passkeys are not (yet, I’ve seen people try though). This isn’t the only type of MitM attack, and, again, both are somewhat vulnerable.

    TOTP is nothing, nowhere similar to passkeys in any way. You do NOT generate codes with passkeys. Passkeys are a form of public/private keys that are used to create a challenge/response request and used to generate a digital signature. The keys are not passwords (aka “shared secrets”). Digital signatures are also not passwords. The only other thing I can think you mean by “code generation” is that you’re using it as a generic catch-all, but that happens with…well everything (even passwords), depending on context.

    I don’t want to sound too much like a die hard passkey fan - and you are right - passkeys are extremely overkill if you use anything above a plain old password. In some cases, layered security can be just as effective. The problem is that most people do only use plain old passwords. If we can get any kind of extra security, even TOTP, then all the better. There are also some cases passkeys are not feasible, so it’s good to have alternatives.


  • That’s false, TOTP can and has been the target of man in the middle attacks, successfully. The implementation of passkeys makes man in middle attacks more difficult, but it could still happen. So both are susceptible to third parties to some degree.

    As far as point of view, I was assuming we were talking about the process, since the goal of passkey UX is to be largely the ‘same as’. Which, to be frank, is way less dedicated since both the implementation of passwords and passkeys can vary widely (2fa, email, id, otp, etc). If we exclude those, the UX is the same - some users might be even using passkeys and not know it.



  • Perhaps he means the process of setting it up. Or when it doesn’t work. Or when passkeys are lost. Or using another device. A lot of people’s complaints about passkeys aren’t really about when it works.

    It’s valid I think, but also some people forget passwords can have similar experiences. For one, there seems to be this idea that if you lose your passkey you get locked out of your account forever. The recovery process should be no different than losing your password.


  • No. It’s a completely different process. It’s a bad name for what it actually does. (Unless you’re talking about how computers do things, then EVERYTHING is numbers)

    Look up public/private key pair encryption. It’s the process that has changed.

    The problem with all these “what are passkeys” guides is that it’s difficult to convey the differences between password and passkeys if you don’t have a deep understanding of encryption or authentication systems.


  • I get what you mean, you’re not the only one. There are generations of games that have explicitly trained you on fast twitch button mashing with graceful dodge frames and intentionally engineered safeguards so rng is in your favor to bring about the best experience. And I’m not mocking you…it’s just how it is and it gets me too. Trying to unlearn that is hard.

    I also hate the ‘difficult for the sake of difficult’. I know some people get a high over doing something incredible, but I don’t get that from banging my head on the same thing over and over. Any souls, souls-like, souls-lite or weighty mechanics games like MH get a hard pass from me.

    However, I really enjoyed Remnant, it’s a mp souls-like - something about witnessing everyone’s shenanigans but still being able to pick each other off the floor is a lot of fun. It feels different and more like what souls should have been (imho).