bumblefudge’s Twitter Archive—№ 32,899

@danfinlay @julien51 but both fingerprint and webauthn/passkey/etc live at the OS level, so wouldn't really help if you got, say, Pegasus'd. i think 2FA is a design pattern but legal requirements are more specific about which factors and where per use case