Passkeys – Still Hesitant

Refer previous posts

I have been keeping an eye on PassKeys and even though you can use most password managers for PassKeys, there are still questions remaining mainly about agreed upon standards.

In particular, there and problems with issues like migration and syncing between devices and services.

As stated previously, my password manager affords an easy solution for long and unique passwords and combined with 2FA, provides sufficient security for my needs.

Password Manager support for PassKeys negates the concerns about per device isolation and the ease with which you can log into a particular device using a four number Pin. But problems with standards on migration between password managers and syncing remain troublesome. I am still considering PassKeys but will continue to wait until all the bugs are resolved.

EMAIL -CHANGE OF IP BY ISP

IP – Internet Protocol (IP) address is the identifying number assigned to every device connected to the internet.

Domain Name – A domain name is text that links to an IP address. It is used to access a website. A domain name is the name that a user types into a browser to reach a website. The domain name for Google is ‘google.com’.

DNS – The Domain Name System (DNS) is like a phonebook for the Internet. It enables Domain Names to be converted to IP addresses.

ISP – Internet Service Provider. The company you get your internet from. In Australia, Telstra, Optus, Vodaphone, TPG, Aussie Broadband etc.

Email Spoofing -sending email messages with a fake sender address. In cases where you have and email address issued on your Domain Name, Email Spoofing involves someone other than the Domain Name owner sending out fake emails under that name.

Recently, I had a number of non-delivery notices from emails I had sent from my email address on my Domain – Whysun.com.

I have several security measures in place to stop Email Spoofing and they depend on quoting the correct IP.

As soon as I started receiving the non-delivery notices, I assumed that my ISP had changed my IP. When you “get the internet” from an ISP, you are in fact buying one IP address and you use your router to link that one IP address to your various devices either by Wi-Fi or Ethernet (cord).

Most ISPs in Australia offer Dynamic IP addresses. In other words, the ISP can change the IP address at any time. You can buy a Static (fixed) IP address, but the ISP does not usually change the IP address all that often. Unless you have a reason for a static IP, it does not matter if the IP changes. Most people just accept a Dynamic IP as they have no reason for a static IP. In cases where you might have a reason to have a static IP, many people (including myself) just accept a Dynamic IP instead of paying extra for a fixed IP as the changes are infrequent.

As soon as I saw the non-delivery notices, I immediately checked my IP/DNS and, sure enough, my ISP had changed my IP address.

It took only a few minutes to fix it. Instead of buying a static IP address, I will regularly send a test email from my domain email to one of the emails I have on Outlook or Google.

My ISP charges AUD$10 per month for a static IP address. I’ll consider paying for this service if changes occur more frequently than just once in a blue moon.

Blog Publishing Tools – Open Live Writer – Windows Live Writer

Windows Live Writer was an excellent Blog Publishing Tool. Unfortunately, it was discontinued and has not been available since 2017.

I then started to use Open Live Writer which was a free open-source fork of Windows Live Writer.

But the last time I used it, it would not publish to my WordPress blog. After spending a few minutes playing around with it, I decided to uninstall and re-install. But it was no longer in the App store. I am certain I would have downloaded it from the MS store.

But it appears that you have download the installer from the website.

This the web site https://openlivewriter.com/

I downloaded the installer and attempted to run it. However, when I got to the part where you input the log in details for the blog, it came up with the same message as before – it could not locate the blog. I had disabled the relative plugin preventing this.

So, it looks like I can no longer use this app and I will have to go back to using the new post tool on WordPress.

iPod Nano – Finally died

My iPod Nano has, after many years, finally died. The battery was still ok, but the internal memory was showing signs of trouble. It finally stopped working.

Apple stopped making the Nano in July 2017 and I bought mine well before that. (I don’t recall when I bought it, but it would be more than 5 years before 2017.) So, my Nano would be well over 12 years old – more like 15 years.

When I heard that Apple had stopped manufacturing them, I bought a spare and put it in storage for this day. Unfortunately, a friend who also used a Nano for running/hiking broke hers, so I gave her my spare.

I mainly listen to podcasts on my Nano so I guess I will now have to use the Podcast App on my phone.

The nano was a great little device. It was tiny and ideal for running/ hiking / walking or for most types of exercise. I used to have an iPod Shuffle. However, the Nano was better. It was a bit bigger, but not by that much and, most importantly, it had a screen (unlike the Shuffle).

Sony has a similar sized 8GB MP3 player called a “Walkman NWZE394B” for about AUD$200. This device is not compatible with iTunes but you can drag and drop iTunes files from computer to the Walkman.

I think I will just use my iPhone.

UPDATE – MY NANO IS WORKING AGAIN

I just remembered – iTunes has a “Restore” function. I ran it for my Nano and it is working again.

PASSKEYS UPDATE No 1 – A Shattered Dream

The podcast – Security Now No 972 – contains important information about Passkeys.

It is interesting to note that the host, Steve Gibson, does not use Passkeys. (At about One hour 57 minutes into the Podcast on YouTube – see following link).

This is the YouTube of the podcast – https://www.youtube.com/watch?v=fSNcUKphUtw&list=PLdPwyUeH0mS566Y0YZ7oAGghzMgRlWTBf

The part about Passkeys starts at about One hour 19 mins and continues until the end.

The latest William Brown Blog referred to can be found here https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/

Although, it appears that you can store the Passkeys code on a Password Manager such as Bitwarden, there are other issues apart from the ones I was concerned about (see https://whysun.com/computers-and-the-internet/passkeys/ )

I am glad I decided to wait.

Windows 10 – End of Support

For some reason I was under the impression that support for Windows 10 ended in mid 2026. NOT SO – it actually ends in Oct 2025 – See Microsoft site https://learn.microsoft.com/en-us/lifecycle/products/windows-10-home-and-pro

Windows 10 Home and Pro

Windows 10 Home and Pro follows the Modern Lifecycle Policy.

This applies to the following editions: Home, Pro, Pro Education, Pro for Workstations

Important

Windows 10 will reach end of support on October 14, 2025. The current version, 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security update releases through that date. Existing LTSC releases will continue to receive updates beyond that date based on their specific lifecycles.

Support dates are shown in the Pacific Time Zone (PT) – Redmond, WA, USA.

If you have a computer that is capable of upgrading to Windows 11, it would be a good idea to do so now.

The quickest way to check is to go to All Settings / Update and Security / Check for Updates    –  See https://support.microsoft.com/en-au/windows/can-i-upgrade-to-windows-11-14c25efc-ecb7-4ce6-a3dd-7e2e24476997

There are links on this page to see if your computer will support Windows 11.  Unless you want to go to Linux, a new computer will be required if your old computer will not support Win 11.

The good news is that Win 11 is little different from Win 10. I upgraded some time ago and it was easy – See https://whysun.com/computers-and-the-internet/i-now-have-windows-11/    As can be seen from this post, there are some minor superficial changes but, overall, Win 11 is very similar to Win 10.

Since then, I have written a series of eleven posts about the differences. BUT the biggest difference is described in No 1 ( At the bottom of the list or https://whysun.com/computers-the-internet/windows-11-update-1-right-click-menu/  ) – The right Click Menu. Otherwise they are only minor.

11

https://whysun.com/computers-the-internet/windows-11-update-11/

10

https://whysun.com/computers-and-the-internet/windows-11-update-10-local-backup-to-external-drive/

9

https://whysun.com/computers-and-the-internet/windows-11-update-9-synctoy-alternative-syncfolder/

8

https://whysun.com/computers-and-the-internet/windows-11-update-8-synctoy-backup/

7

https://whysun.com/computers-and-the-internet/windows-11-update-7-snap-layouts/

6

https://whysun.com/computers-and-the-internet/windows-11-update-6-settings-your-microsoft-account/

5

https://whysun.com/computers-and-the-internet/windows-11-update-5-microsoft-store-updates/

4

https://whysun.com/computers-and-the-internet/windows-11-update-4-notifications/

3

https://whysun.com/computers-and-the-internet/windows-11-update-3-lock-screen/

2

https://whysun.com/computers-the-internet/windows-11-update-2-control-panel-back-up/

1

https://whysun.com/computers-the-internet/windows-11-update-1-right-click-menu/

.

PASSKEYS

Albert Einstein – “If you can’t explain it to a 6-year-old, you don’t understand it yourself.”

I have been interested in Passkeys, but I haven’t yet used them as I don’t fully understand the system. Moreover, when I search online, the explanations are as clear as mud. This lack of clarity suggests a lack of complete understanding – as per Albert Einstein. YES – I admit that I am not as smart as a 6 year old!

By what I can understand, Passkeys seem as though they are confined to an individual device and, if you want to use the system on multiple devices, you have to set up a per device Passkey.

But I stress, I do not fully understand it.

My very limited understanding:

A passkey is a public/private key cryptographic system that is stored on your computer/device and is used instead of a username/password to sign into various web sites. In other words, code that identifies the device and, since you have signed into that device, you.

The passkey is said to be more secure than a password even when the password is combined with 2FA.

The thing that is putting me off using Passkeys is that the system seems to be confined to a single device/computer that contains the private key. If you want to use it on different devices, you need to set up a new Passkey for that device. You do this by usual sign in with a password and/or use your phone (using the camera to take an image of a QR code) and/or authorisation on the first device to confirm your identity. There are advances being made to address this issue e.g. Using a device like YubiKey or a Password Manager.

This YouTube video contains a far better explanation and details how Public Key Encryption works. He also confirms that the Passkey is linked to a specific device (10-minute mark) and that you need to set up device specific Passkeys:

https://www.youtube.com/watch?v=6lBixL_qpro

More and more sites are accepting Passkeys and the big Tech companies (Google/Apple/Microsoft etc) are supporting the system. Clearer explanations are starting to become available, but I still have gaps in my understanding.

My Password Manager is now said to support Passkeys. However I am not sure whether the Password Manager stores the private/public code or if it is still stored on the device.

I still have many questions. I don’t want to commit to Passkeys and then find out that I have issues using another computer.

My Password Manager has taken the pain out of long and unique passwords and I want to avoid it being like when I sign into iCloud on my Window’s computer and the sign in requires both a code sent to my iPhone and a tap to “allow” also on my iPhone.

If you have not cancelled password sign in (and without this, the advantages of Passkeys are largely negated), what is the point. The only way I can see is if you store the private key on say a YubiKey or a Password Manager.

I just don’t know. I did think of starting with Password Manager sign-in on one of my computers. BUT, if I do this, and someone borrows or even steals the computer and knows my PIN then the point of having a 30+ character Password Manager sign-in password is negated. My Surface Pro has Windows Hello face recognition but if that fails, the PIN will get you in.

There may also be potential issues when you upgrade a device. I have authenticator apps on my iPhone. In the past, when I upgraded my phone, I had to be sure to keep the old phone until I had transferred the log in 2FA to the same app on the new phone.

However, I note that when I last upgraded to the latest iPhone, I did not have to do this. I want any problems like these to be sorted out before I make the move. I don’t remember the aforementioned authenticator app issue being talked about when we were being encouraged to use authenticator apps instead of SMS for 2FA.

I will wait.

NBN UPGRADE FTTN to FTTP – Update 1

FTTP – Fibre to the Premises

FTTN   – Fibre to the Node

It was in September last year that I posted about the NBN pits being worked on in our area. See https://whysun.com/computers-and-the-internet/nbn-upgrade-to-fttp/

I immediately altered my internet plan to qualify for a free upgrade and signed up for email updates from NBN.

In early October this year, a search of my address on the NBN site as well as an email from my provider (Telstra) confirmed that I could now proceed with the upgrade.

The Telstra email contained information to book a visit from a technician.

CORRECTION – THE CROSSED OUT PART IS NOT CORRECT – SEE UPDATE

My understanding of the procedure is:

· An initial visit from a technician to determine what work is required;

· Then, depending on the outcome of this visit, a further visit to install the equipment.

A Utility Box is installed outside the house where the existing NBN (Telstra) box is located then an internal NBN Connection Box is installed inside the house.

I hope the conduit from the pit on the footpath to the existing outside connector is in good order and they will just be able to pull the fibre through it.

The internal Connection Box requires a power point nearby and I have had an Electrician install it.

The only problem I envisage is the location inside the house where I want the NBN Connection Box. I want the new box to be located near the existing outlet for the internet. The NBN site says they will want to install it in a position that is convenient to them. See https://www.nbnco.com.au/residential/upgrades/more-fibre/step-by-step-guide

It’s important to remember our technicians have health and safety considerations to make when helping to choose a suitable location to install the nbn connection box.

  • It may not be possible to have the new connection box installed in the same location as your original technology connection points.
  • In the first instance, they will generally propose the connection box to be placed in an easily accessible location in the nearest appropriate room to the outside nbn utility box (provided it is not a wet area such as a bathroom or laundry room). Generally, we will only install devices in a bedroom if requested by you.
  • They may consider alternative locations that are easily accessible and within 40 metres of the nbn utility box, if all required specifications are met.
  • If you have a specific location that you would like the nbn connection box installed that does not meet the specifications above, you may need to separately engage a licenced cabler to provide a suitable cable path.


My existing outlet and router etc are within 40 metres. But, if necessary, I might have to engage a commercial cable installer. I will wait and see and post updates as they occur.

UPDATE – This Information is based on my visit from the NBN Technician 25th October.

NOTE! The usual procedure is for a Technician to do the installation in the first visit. Subsequent visits are only needed if problems are encountered.

CARE! The NBN only installs the fibre plus the two NBN boxes. The NBN does NOT connect up the router. This job is either done by the carrier or via self install.

In my case, the Technician arrived within the appointed time. He sent a text when he was on his way.

The procedure only took about 2 hours. The location of the inside connection box next to my modem was not a problem. He got up in the ceiling to run the cable and he put the connection box where I wanted it.

The only slight hitch was with the cable from the footpath pit to the outside utility box. He had a bit of a problem with the “pull through” but he inserted it from the other end and the issue was quickly resolved.

Overall it was straightforward and painless.

The usual procedure is to continue operating with your old connection pending “activation” by your carrier. The carrier provides a new router/modem (if needed) plus the ethernet cable to connect the NBN inside connection box to your router/modem.  The carrier sends a text when the new service is activated and, with a self install, provides instructions, the ethernet cable and the modem/router (if needed). I phoned Telstra and was told that the usual period for activation is 5 to 7 working days.

The NBN Technician said that it is usually less time and could even be a couple of days. It was less that 2 days – see below ##, and to make it clear, the NBN Tech does not carry the ethernet cable to connect the NBN box to your router/modem.

I received a text message from Telstra (on the afternoon of the day after the NBN visit) saying that Telstra was aware that NBN had completed conversion to FTTP, and they would text again when it was up and running. This second text was received on the afternoon of 27th October – After I had it working – see below ##.

I had a spare ethernet cable and the NBN Tech plugged it in at my request.

After the ethernet cable was connected, I logged onto my router/modem and the program shows that the fibre is “up” with a speed of 1GB.   I already have a speed of 100 MB down but I decided to pay for a higher speed of 250 MB down. Telstra has a special on at the moment so, initially, I won’t pay any more for the increased speed. I will probably keep that higher speed as the cost difference is not much.

Fingers Crossed – it should be all up and running by next Friday. See below ##.

##  27th October   IT IS NOW WORKING  (Less than 2 days after NBN Technician visit.)   I am still on my old plan and the new higher speed will cut in on Monday.

CARE !! I don’t know when it actually started working –  After reading some instructions, I decided to unplug the ethernet cable (NBN connection box to modem) from the port used by the Tech (UNI – D4) and instead plug it into the first port UNI-D1 (as per the instructions on line). I stress again that the NBN Tech only plugged it in on my request and I provided the ethernet cable.

NEW PLAN

I selected the 250 Mbps down 22 Mbps up plan as it was only $25 more than my existing 100 down plan. You can get a 700 Mbps down 40 Mbps up plan, but that is $60 pm more. I don’t think the 700 plan is worth it – the 250 plan is fast enough for me.

My new speeds

Upgrade to iPhone 15

I have upgraded my old iPhone to the iPhone 15 Pro.

Having recently upgraded my old Mac Book Pro to a new model, I was interested to see if Apple made upgrading an iPhone as easy as it was on the Mac Book.

It was BUT with two exceptions.

The first was with Authenticator Apps. I don’t know if it is me, but I had some minor issues . However, they were relatively easy to sort out.

The second one was down to me.

It involved Bluetooth. I could not work out why my Fitbit Versa would not sync to my new phone.

It took at least a couple of hours before the penny dropped.

The Fitbit ( as well as many other Bluetooth things) can only be connected/paired to one device at a time!

My Fitbit Versa was still paired to my old phone.

My excuse – I am old and do not understand these new fangled machines!