deejay4am

Passkeys rely on you holding a private key. The initial design was that a device (like a browser or computer/phone) stored the private key in a TPM-protected manner, but you can also store it in a password manager.

This is more secure than a password because of the way private/public key encryption works. Your device receives a challenge encrypted with the public key, decrypts with the private key and then responds. The private key is never revealed, so if attackers get the public key they can’t do shit with it.

Just be sure that your private key is safe (use a strong master password for your PM vault) and your passkey can’t be stolen by hacking of a website.

And yet you’re still here

This take is riddled with naivety.

Not only will Meta read, train AI on, aggregate and datamine, and correlate this data with your real identity, but when Meta announces that “the easiest way to be on the fediverse is to just use Threads” then all the people who avoided Mastodon because it was “too complicated” to sign up, all the people who are basically already signed up because they scroll Insta all day, will go with Threads instead of spreading the load out.

As smaller instances start to drop off under the load, under the lack of interest as threads grows and they shrink, merely mirroring the traffic of a centralized corporate entity, users start to flock to threads for its reliability and speed.

Then Meta pulls the plug, since “no one really used this ActivityPub thing anyway, it was too technical”.

Threads isn’t about beating “X” (lol X is in a death spiral, it’s only a matter of time), it’s about ensuring the Fediverse never rises up.

See what happened with Google Talk and XMPP.