Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I’m saying most people who do phishing likely don’t care to implement passkey detection to display a relevant error message to the user, as it’s not worth the effort, as of now


Which means they'll just ask for passwords, which users will happily input since they know they have a password for the service.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: