MikeTrendsTrends right now
AI: reposAPI

search

passkeys

Trends

  1. 1
    openGym launches as open-source self-hosted workout tracker●Want a fitness tracker you actually control? openGym is an open-source, self-hosted workout tracker for planning routineMmastodonTechnologySoftware105 h ago

    openGym, a new open-source and self-hosted fitness tracker, is drawing attention for letting users plan routines, log sets, track body weight and monitor progress while keeping all data on their own server. It requires no subscription and includes no ads or telemetry, with support for passkeys and offline use.

  2. 2
    Open-source self-hosted gym tracker openGym gains attention●DuarteSantos8/openGym⬢github5703 min ago

    Developer Duarte Santos released openGym, a self-hosted gym and body-weight tracking app written in JavaScript. Users can plan routines, log workouts including supersets, warm-ups and cardio, and see which muscles are trained, fatigued or detraining. It imports data from FitNotes, Strong and Hevy and supports passkey login, with all data stored on the user's own server.

  3. 3
    ZITADEL hit by seven vulnerabilities enabling account takeover●ZITADEL cluster — 7 CVEs, peak CVSS 9.3 CVE-2026-105209: forge x-zitadel-orgid header → issue passkey enrollment for anyMmastodonTechnologyCybersecurity25 h ago

    Security researchers disclosed a cluster of seven vulnerabilities in ZITADEL, an open-source identity and access management platform. The most severe, CVE-2026-105209 with a CVSS score of 9.3, involves forging the x-zitadel-orgid header to trigger passkey enrollment for arbitrary users, potentially allowing full account takeover across tenants. Another flaw, CVE-2026-105215 (9.1), enables pre-hijacking accounts via forged identity provider callbacks. Administrators are urged to patch promptly.

  4. 4
    Debate over whether passkeys' lack of backup makes them phishing resistant●@ steveriggins @ agowa338 @ vineethkuruvath @ monkeydom @ iamkonstantin @ acdha @ farseen On a related note, I saw someoMmastodonBusinessCrypto212 h ago

    A technical discussion is underway about passkeys, the passwordless login credentials promoted as a phishing-resistant replacement for passwords. One participant noted a Reddit argument that the inability to back up passkeys is precisely what makes them phishing resistant, since secrets that cannot be exported cannot be handed over to attackers. Commenters are weighing whether that trade-off justifies the lack of portability across devices.

Repos