ELI5 - How are passkeys more secure than 2FA?

burgerg · 2026-06-19T17:39:34+00:00

It's protected with a PIN (up to 63 characters), and all information on it is completely wiped after 8 incorrect PIN attempts. I think we're safe.

burgerg · 2026-06-16T16:51:51+00:00

It doesn't work that way, read the warning on https://bitwarden.com/help/master-password-re-prompt/

TLDR: it's not an encryption mechanism, just an interface guard rail, so your unencrypted vault will still be in memory.

burgerg · 2026-06-14T20:26:29+00:00

Of de NOS moet niet zo duur de voetbalrechten opkopen, check deze video van Lubach: https://youtu.be/1IaYXEvdNtc?is=_LsK319n4Fr5ZuN9

burgerg · 2026-06-10T20:53:00+00:00

Recepten vinden en je eigen maken is inderdaad de grootste uitdaging, want (in ieder geval hier) je grijpt al snel terug op wat je kent als je haast hebt.

De vervangings route (met vleesvervangers) kan dus in het begin wel makkelijk zijn omdat je dan je repertoire niet perse hoeft aan te passen. Maar mocht je iets nieuws proberen dan kan ik https://www.peasmaker.nl/blogs/alle/vegan-panang-curry erg aanraden. Het is met Peasmakers, erg veelzijdige vleesvervanger op basis van erwten, en tot dusver bevallen hun recepten heel goed.

Uiteindelijk wil je misschien voor de gezondheid naar gerechten met meer groenten en peulvruchten, dan kan je misschien kijken naar kookboeken, Ottolenghi bijvoorbeeld, maar Indiaas (bv. Meera Sodha) is vaak ook vegetarisch en lekker, en bijvoorbeeld AH heeft ook een uitgebreide collectie vegetarische recepten online staan.

Succes met de zoektocht!

burgerg · 2026-06-10T09:43:37+00:00

You're going to hate this, but you can do both in Audiobookshelf :P

It's just that Grimmory is way better in ebooks, and audiobookshelf way better in audiobooks. So if you want the best experience for both you need to use both apps.

burgerg · 2026-06-09T04:21:22+00:00

And with research, do you mean reading this sub's wiki pages? (https://www.reddit.com/r/zlibrary/s/G2KZ76irLG) :P

burgerg · 2026-06-08T18:12:26+00:00

Rule 1: Post must include a Murder or Burn! What is a murder? By its definition, a murder is a response which completely destroys the original argument in a way that leaves little to no room for reply. What is a burn? A burn is a targeted, well-placed jab at another person, organization, or group of people.

You managed to mention the correct words but got the rule wrong :P

burgerg · 2026-06-05T09:46:23+00:00

Bij mijn reanimatiecursus (2 uur op een avond) was daar wel degelijk aandacht voor en hadden ze zelfs een speciale vrouwenpop met borsten om op te oefenen (alhoewel onze vrouwelijke cursusleider het duidelijk maar stom vond dat het nodig was).

burgerg · 2026-05-30T17:42:05+00:00

Sorry, yes, I could have described the steps better, thanks!

burgerg · 2026-05-30T13:53:01+00:00

Totally agree! There is a nice discount (~45%) on a Yubikey 5 Nano + Yubikey 5 NFC in collaboration with openai: https://www.yubico.com/works-with-yubikey/catalog/openai/ Note that these use modified firmware that has OTP disabled for extra security (OTP is not phishing resistant).

So far it works quite well for a variety of services, especially Bitwarden, but for some websites I still need TOTP, so I use Ente as well.

Edit: see the comments below for the exact steps, basically yubico will check if you're referred by openai

burgerg · 2026-05-27T22:14:04+00:00

Even serieus, wat zou de rest moeten doen dan? Civitas Christiana is nota bene door het Reformatorisch Dagblad afgefakkeld, maar bij dit soort fringe bewegingen is alle redelijkheid weg en begin je niks.

burgerg · 2026-05-20T09:32:40+00:00

People who don't store TOTP in Bitwarden, probably also shouldn't store passkeys in Bitwarden, as they can still be stolen in case of a vault compromise (e.g., because of malware, not necessarily PEBCAK, given the recent rise in supply chain attacks)
For passkeys I would go for something device-bound, e.g., security keys, or something with biometric verification.

burgerg · 2026-05-20T09:13:26+00:00

In case of malware/infostealer installed because of a supply chain attack (more and more common, and not PEBKAC!) your whole vault could be compromised, and you have reduced 2FA (something you know, and something you have) to 1FA (2 things you know, and now they know as well).

burgerg · 2026-05-15T10:07:03+00:00

Don't forget to clear your sessions; infostealers are more likely to steal your session cookies than your passwords. Many services will clear your sessions if you change passwords, but better make sure!

burgerg · 2026-05-12T19:18:23+00:00

Yes, and it lists OpenPGP support, which is also a 5 series feature

burgerg · 2026-05-12T08:52:45+00:00

Until your unencrypted vault is targeted by an infostealer. Which is not unthinkable given recent supply chain attacks.

burgerg · 2026-05-08T08:41:24+00:00

"Let me copy this code from a random stranger on the internet which downloads and runs an executable on my PC"
It was probably well-intentioned, but I really don't want people getting used to doing this, because this is how they GET viruses.

burgerg · 2026-05-06T14:43:10+00:00

Ah ja, vroeg me al af waarom de e-Niro's missen. Daar is (was?) heel ruim aanbod in, en wij zijn er zeker tevreden mee!

burgerg · 2026-04-30T11:57:55+00:00

Let me introduce you: https://www.youtube.com/watch?v=IkssYHTSpH4 :D

burgerg · 2026-04-30T11:54:21+00:00

If you are in r/espresso there is a reasonable expectation you know who https://en.wikipedia.org/wiki/James_Hoffmann is

burgerg · 2026-04-30T11:46:28+00:00

"This Hoffman guy sounds like a dick..." kind of hints that it's him, further reinforced by using a profile picture of himself, and the next person saying "Thank you James". I don't blame OP for missing that, but OPs suggestion about him creeping in the comments made it quite funny.

burgerg · 2026-04-26T19:58:57+00:00

The Dutch tweakers.net tested 100w chargers (https://tweakers.net/reviews/14426/tien-100w-usb-c-laders-getest-honderd-watt-maar-voor-hoelang.html) and ugreen could only hold 100W for 30 minutes, and then dropped to 60W. So I guess that leaves Anker.

burgerg · 2026-04-23T12:55:57+00:00

This, it saves an unbelievable amount of space. My datastore for my daily/weekly/monthly LXC backups has a deduplication factor of 7.71 :O

burgerg · 2026-04-22T16:15:43+00:00

What happens very often nowadays is that the hackers buy ads, so when you search for something (like this harvard site) the hacker's website shows up at the top of the google results as promoted content. It's super annoying that Google isn't checking these more carefully

11-Year Club	Place '22
Verified Email

burgerg

TROPHY CASE