If you think this won't immediately be abused in ways you ... • Aaron Parecki

62°F

Sam 0xEACD https://twitter.com/samuelgoto • Jul 29
I'm pretty convinced there is something to be done here. Not cookies per se, has to be opt in (breaks backwards compatibility otherwise), but i agree there is something here.

Interested in exploring this further with browser engineers?

If you think this won't immediately be abused in ways you didn't intend, go read up on Britney's case where they had a copy of all her comms from a shadow iOS device signed in to her iCloud

Philadelphia, Pennsylvania • 83°F

Fri, Jul 29, 2022 5:40pm -04:00

1 like 3 replies
- tim cappalli | 📍Philly
Have you written a response to this? Let me know the URL:
- tim cappalli | 📍Philly twitter.com/timcappalli
  
  Session references and account credentials are fundamentally different
  
  Fri, Jul 29, 2022 10:21pm +00:00 (via brid.gy)
- Aaron Parecki twitter.com/aaronpk
  
  The problem is FaceID is only tied to the device so it doesn't change the situation 😔 I'm also not convinced syncing WebAuthn keys was a good idea either tho
  
  Fri, Jul 29, 2022 10:19pm +00:00 (via brid.gy)
- tim cappalli | 📍Philly twitter.com/timcappalli
  
  So one authentication gives you access to all services? That is horrifying.
  
  Fri, Jul 29, 2022 10:19pm +00:00 (via brid.gy)

Posted in /replies using indigenous.abode.pub/ios