passwords ain't broken but the thinking here is at HN :( passwords are going to be around for a good long time as i suspect WebAuthn and others will discover. the author is correct that hackers are smarter than companies and developers about human psychology, which, like, matters. databases want identity data and a simple 2FA on top of passwords is winning because marketing can get your phone # too. and on and on...