New ask Hacker News story: Apple removes passwords – Is it more secure?

Apple removes passwords – Is it more secure?
2 by alsolemmings | 0 comments on Hacker News.
Source: https://ift.tt/D2J78yY I guess this eliminates a few options for bad actors: - brute force - phishing (users don't even know their public-private keys) - can't use application oauth identity to intercept because user creds are probably validated in apples servers Still has some vulnerabilities though: - hack into iCloud keychain - it's been done before - malicious third party app that can retrieve public-private key pairs from device storage