The way i understand it is that remote attestation (main point of this article) makes it possible for services to deny unapproved software. They can deny off market devices, operating systems, or certain password managers. So even if you use password managers you mentioned, if you’re using off market OS (e.x lineageos) they can deny access. Here’s a quote from the article “Remote attestation lets a website demand cryptographic proof that your device, operating system, firmware, and passkey manager are all on an approved list.”
It’s more like how my bank has started locking users out of online banking if they don’t have the mobile app for authentication, and preventing the mobile app authenticating the user if they’re running a non-approved version of Android like GrapheneOS. Try to gain digital independence and all these mechanisms will be used to shut you out of everything you need. Only thoroughly locked-down and surveiled devices will be allowed to access useful services.
and your redundant 3-2-1 backup system of that. Everyone knows that! Surely no one has no backups. Oh well, can’t design around that unpredictable problem that no one could guess. Everyone has backups!
As far as I know using a password manager such as KeePassXC or Bitwarden solves all of these problems?
The way i understand it is that remote attestation (main point of this article) makes it possible for services to deny unapproved software. They can deny off market devices, operating systems, or certain password managers. So even if you use password managers you mentioned, if you’re using off market OS (e.x lineageos) they can deny access. Here’s a quote from the article “Remote attestation lets a website demand cryptographic proof that your device, operating system, firmware, and passkey manager are all on an approved list.”
Hm, so similar to websites blocking user agents now.
It’s more like how my bank has started locking users out of online banking if they don’t have the mobile app for authentication, and preventing the mobile app authenticating the user if they’re running a non-approved version of Android like GrapheneOS. Try to gain digital independence and all these mechanisms will be used to shut you out of everything you need. Only thoroughly locked-down and surveiled devices will be allowed to access useful services.
and your redundant 3-2-1 backup system of that. Everyone knows that! Surely no one has no backups. Oh well, can’t design around that unpredictable problem that no one could guess. Everyone has backups!
I mean I would hope so, but even if not losing a password manager database sucks regardless if you used passkeys or not.
Make that question mark a period, good sir/ma’am!