[HN Gopher] Breaking WebAuthn, FIDO2, and Forging Passkeys
       ___________________________________________________________________
        
       Breaking WebAuthn, FIDO2, and Forging Passkeys
        
       Author : vmfunc
       Score  : 18 points
       Date   : 2025-06-20 16:55 UTC (6 hours ago)
        
 (HTM) web link (www.nullpt.rs)
 (TXT) w3m dump (www.nullpt.rs)
        
       | rlpb wrote:
       | I'm not sure what this "breaks". Unless a site requires
       | attestation and validates that attestation, a bad software FIDO2
       | implementation will leave users vulnerable should they choose to
       | use one.
       | 
       | Didn't we already know this?
        
         | vmfunc wrote:
         | see https://x.com/vmfunc/status/1936120644087001297
        
       ___________________________________________________________________
       (page generated 2025-06-20 23:02 UTC)