Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing MFA to a single factor.
45 points by jchanimal 78 days ago unit42.paloaltonetworks.com 39 comments

Summary

Learn how shortcomings in passkey implementation can compromise security by allowing multi-factor authentication to be bypassed, effectively reducing it to a single factor. Understanding these vulnerabilities is crucial for improving passwordless authentication methods.

Comments (39 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open