Authentication does not equal authorization: Are we asking passkeys to prove too much?
THE SO WHAT
Passkeys solve “who are you,” not “what should you be allowed to do” — collapsing those layers is how over-permissioned accounts and lateral movement happen. CISOs should treat passkeys as one control in a broader authorization and policy engine, not as a reason to relax least-privilege design.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechCloudflare sees millions of attempts to exploit critical PHP flaws
Once a remote code execution path on a ubiquitous runtime like PHP goes public, you have hours, not days, before it’s industrialized at scale—Cloudflare seeing millions of exploit attempts in 10 hours is the data point. If you’re still treating patching as a weekly cadence instead of an emergency change path for core web stacks, you’re running an unacknowledged bug bounty for attackers.
Deep & Emerging TechLexar’s new microSD card delivers 250MB/s speeds for a low price: Where to buy from $34.99
Cheap 250 MB/s, IPX7-rated microSD shifts the constraint for edge capture from media cost to processing and connectivity. If you’re shipping cameras, drones, or handhelds, you can assume users will happily overspec storage—optimize your pipeline for ingest and sync, not for saving a few gigabytes.
Deep & Emerging TechCapcom data breach confirmed — around 11.7 million accounts thought to have been affected
An 11.7 million account breach with attempted password changes shows attackers are now treating gaming platforms as identity and payments infrastructure, not just entertainment. If you run any consumer account system, assume credential-stuffing and account takeover are core business risks and invest accordingly in MFA, anomaly detection, and blast-radius limits.
Deep & Emerging TechIntel CTO tells Dwarkesh Patel the world lacks tools to 10x chip output
Intel’s CTO saying the world can maybe 2x but not 10x leading-edge wafer output because the tools don’t exist is a hard cap on how fast compute supply can follow AI demand. If your roadmap assumes cheap, abundant advanced nodes, you need a contingency plan—optimize models, consider older nodes, and treat leading-edge capacity as a strategic asset, not a commodity.