My background is very much not in this world so caveat my questions/response below with that mind set. I do however try to practice decent personal opsec such 2fa (TOTP), password manager with random generation, etc.

I feel like a lot of what you stated was covered in the article. For example the article states that problem isn’t the number of stakeholders, it’s that none of them are consumer advocacy groups.

I understand that the author maybe leaned on the password sharing example too much but I think that was in an effort to present the material in a friendlier manner to the average reader. The closing statement makes it clear it’s not really about Netflix, etc. The main concern is that attested passkey requirement will now be the easiest way to force specific software and hardware upon user. The GraphenOS example is a good one.

You might not use the attested flag in that manner but I have zero doubt that once passkey adoption rate passes a certain threshold Google will be more than glad to miss-use that flag to lock people out of their gmail account unless they have the most recent phone and software.

Do you have any examples of any public service requiring attested keys? No, because it really doesn’t make sense. But because the protocol supports it, people shouldnt use passkeys? Shitty hot take.

I think this is a bad take. “Because this potential is not being misused right now it won’t be a problem in the future” has not really served us well thus far.

My understanding is that the article is saying that passkeys are giving away too much control to the second party. That can and will be abused.

But again, layman’s understanding from my end.

Two recommendations would be to use “overlords” instead of “landlords” I think former is a better catchall than the latter.

Second recommendation, on the “Find an App” page it should auto-scroll to the list below when you select one of the large pills. Or alternatively, do away with the big selection pills altogether. No reason to have two filtering methods that accomplish the same thing on the same page.

Friendly rebuttal. I don’t like this version either because of two reasons. First is that it is still using stolen material to do any of this “creative work”. Second: the knob twiddling, mixing colors, and all versions of that are integral to the creation process. Happy accidents are why we have a lot of what we have in the creative world. Somone chasing a specific sound might discover their own sound while twiddling away for hours. They will be able to do that in a much more replicable and modifyable way than the black box that is “AI”. But that’s just my opinion as an amature creative.