#autofill — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #autofill, aggregated by home.social.
-
📄 "The (Un)suitability of Passwords and Password Managers in Virtual Reality" by Emiram Kablo, Yorick Last, Patricia Arias Cabarcos, and Melanie Volkamer was accepted for presentation at the #Conference on Sociotechnical #Cybersecurity and #Privacy (SCP 2026). The paper examines the experiences, preferences, and expectations of 126 #VR users regarding #authentication in virtual reality through a user study.
👓 The study revealed a clear preference for simple passwords, as well as interest in #biometric methods and #password managers. It then conducts the first comprehensive evaluation of existing password managers in VR based on 91 cognitive walkthroughs and expert reviews. The results show that while password managers improve #usability, important features such as cross-app #autofill are still missing. Building on this, the paper formulates recommendations for more #secure and user-friendly VR authentication.
🔎 In a Google search for “Password Managers in VR,” the preprint currently ranks first.
SCP will take place September 2nd and 3rd, 2026 in Belval, Luxembourg.
Read the pre-print: https://arxiv.org/abs/2503.18550
@KIT_Karlsruhe
@kastel -
@Tutanota : rubbish.
Two WEAK locks may be LESS pointless than one WEAK lock, but they're still pointless. Go read https://www.csoonline.com/article/4147134.
U2F has been superseded by FIDO2 (hardware keys in WebAuthn mode) and Passkeys (example in Dutch: https://todon.nl/@ErikvanStraten/116285192238090438).
Both WebAuthn methods have advantages and disadvantages.
If you don't like them, use a trustworthy passwordmanager and:
• Let it create a unique, random, as long as possible, pw per account
• Make backups of the pw mngr database
• Device compromise means "game over"
• Use Autofill (easy in Android and iOS/iPadOS)
• If Autofill does not automatically retrieve your credentials, it probably is a fake (phishing) website. Do read https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/
Please stop misinforming people.
#WeakMFAsucks #Weak2FAsucks #FIDO2 #WebAuthn #Passkeys #AutoFill #KeePassium #KeePassDX
