This is fantastic research from Unit42. My takeaway here is that passkeys are still much better than passwords, and Chrome as a credential manager is still a terrible idea.
Use a separate password manager.
2 Likes
Stinger: you gotta love that Chrome considers this a physical attack “outside the threat model.”
1 Like
It can’t hurt us it’s OuT oF sCoPe
