Post

@filippo.abyssdomain.expert

We got a lot of traces, thank you! The main category we are missing (unsurprisingly) is Windows. We got one (1) pure-Windows session 😅 Please... idk, ask a friend? help-test-crypto-passkey.exe.xyz Also, I worked around an interop issue in KeePassXC and ChiPass. If you use those please try again!

Filippo Valsorda@filippo.abyssdomain.expert

I am mostly done implementing crypto/passkey, but now I need YOUR help collecting real-world traces for its test suite! Please go to help-test-crypto-passkey.exe.xyz and click the buttons. It should take 1–3 minutes. 𝘌𝘴𝘱𝘦𝘤𝘪𝘢𝘭𝘭𝘺 if you have some unusual Linux-on-the-desktop xkcd 1987 passkey setup.

19/8/26, 9:25 pm13 reposts34 likes

Michael Pratt

@prattmic.com

20 Aug

All the smart Windows users know that sketchy-phrase.exe.xyz is definitely phishing at best or active exploit at worst.

adg

@nf.id.au

20 Aug

I got banned from a gaming discord for posting a helpful tool I made that was hosted under the exe.xyz domain. 🤷

Robert Burke

@lostluck.dev

19 Aug

I'll give it a go when I'm home. A laptop and a desktop even!

eufalconimorph.bsky.social

@eufalconimorph.bsky.social

19 Aug

> Please... idk, ask a friend? Friends don't let friends use Windows.

lol was that me?

@filippo.abyssdomain.expert

Yep! ^^

Okay, did what else I could with Windows. I can probably figure out the rest if no one else is able to do them easily.

Steve Syfuhs

@syfuhs.net

19 Aug

Fiiiiiine, have some more data Filippo

Mark X

@markmx.bsky.social

20 Aug

Great use for a used Thinkpad. I’ll see if I can roust up a windows 10 install

bjkeefe

@bjkeefe.bsky.social

19 Aug

I would be happy to help. (Windows user here.) Can you tell me an easy way to create a (test) passkey that doesn't involve going to a site I have an account on and creating one there? (I don't use passkeys IRL yet.)