this post was submitted on 11 Nov 2025
277 points (87.5% liked)
Technology
76918 readers
3209 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Somehow PieFed is able to make them work but simultaneously many large companies are shifting to "magic links" sent to your email. 😡
Yep... It's as secure as your email. Or they are just leveraging the passkeys on the emails.
I'm not really concerned about the security of it. Moreso the inconvenience of having to open my email client, specifically on the same device, and then sit there and click the refresh button over and over, waiting for it to come through, and then having to go back and delete it after so there's not even more clutter in my inbox...
Honestly, convenience is security (change-my-mind lol) insofar as it measurably impacts rate of user adoption/adherence and thus outcomes.
It’s the annoyance you describe that leads most users to skip 2FA setup until it’s forced on them, for example.
Not at all. Typically they're opposites. But I understand what you're trying to say. More convenience leads to better security.
Or rather, making security convenient leads to adoption. Making it inconvenient leads to insecure workarounds.
Exactly
If it's more convenient to be insecure than secure, users will pick insecure every time. There's a reason there are so many bad password in the top passwords in breach dumps.
I have to tell myself every time I go through some of my login flows that inconvenience to me means more so to an attacker, but most people don't have an adversarial mindset and just want it to work.
User inconvenience is not at all the same thing as security.
No, but the two tend to be correlated.
Example, MFA authentication is a security feature, but inconvenient as shit with low or no lifetime. Same complaints about short lived sessions on app sites. Especially when every login requires MFA....
MFA can be a variety of different things. In the case of passkeys, a prompt comes up on the screen, you click it, and that's it. It's both secure and convenient. That's why it's great.
Yeah you get it. It’s a “slow = fast” type of spiel, just a bone to pick with colleagues who embrace anti-user practices needlessly.
Don't forget the intermediary
Slow is smooth, and smooth is fast.
Haha that’s the one ;)