2026-10-23 17:55 UTC
Replies (4)
-
@cheese_greater@lemmy.world 2026-10-23 18:18
Under neath ur Keys
-
@Pomal@sh.itjust.works 2026-10-23 19:36
The second people turned it into a drama 💅💅
-
@ChaoticNeutralCzech@feddit.org 2026-10-24 06:23
For this very reason, common definitions of “security” now include availability for authorized use
-
@exdor@programming.dev 2026-10-26 19:02
May I introduce you to the german “Elster” tax portal? Most fucking insane security mechanisms ever. They support fido2 but with their app, not via a browser. They have a probably encrypted keyfile but that expires in 3 years and you need to login switch to desktop mode as otherwise they hide it send a code per email the site generated another code you also need you get another email with another link, which also doesnt include any code you need to logout to login again? you need to enter the 2 different codes for whatever reason. One is generated on the site before you need to log out then wait forever to create the keyfile you also need a password So afaik you need a username, email, password, keyfile and password for the keyfile. why a keyfile again? why a username if it is never used? why so many emails with all the secret credentials instead of secure e2ee login on the website? Most insane shit I have ever seen, this should be illegal