Hacker News Reader

The passkey pop-ups which are indistinguishable from javascript pop-ups are a particularly egregious security mistake.

What's the problem here? Javascript popups can't read your fingerprint so what would be the endgame of a fake passkey popup?

They’re saying they shouldn’t look similar because it conveys authority otherwise.

timeout after 10 seconds "fingerprint can't be read, please enter password"