evilginx2 VS awesome-lnurl

No, if you break into a site using passkeys, it gives you literally zero information that can be used to authenticate as any of the users. Think about the prevalence of data breaches in the past decade, and the sharp rise in the effectiveness of password stuffing, and think about why this change might be a good idea.

Also even with traditional 2FA, TOTP can be phished. See https://github.com/kgretzky/evilginx2

WebAuthn almost entirely eliminates phishing risk, and Passkeys are a really nice, clean UX for using WebAuthn.

So I downloaded this onto my computer https://github.com/kgretzky/evilginx2 and that took while since I’m new to GitHub and I barely know my way around computers. That went fine, i noticed there was another repository that was pretty much an add on to that same software I downloaded earlier “evilginx2” by another creator, this is the link https://github.com/simplerhacking/Evilginx3-Phishlets

Did your friend clicked on a phising link, if yes a aitm coud be one of the possibilities: https://github.com/kgretzky/evilginx2

We had a user compromised simiarly the other day, with what I believe to be https://github.com/kgretzky/evilginx2 now. It stole his session cookie and was able to auth. Fortunately, we have Office 365 Defender and he was flagged immediately on the risky user sign-ins and we were able to block and investigate.

Evilginx kan bypass MFA and hijack your session https://github.com/kgretzky/evilginx2 Only thing that migitates this is fido keys

You can try this for web app traffic MIMD: https://github.com/kgretzky/evilginx2

Coincorner fees aside, this works on an open standard: https://github.com/fiatjaf/awesome-lnurl

What you are looking for is LNURL. Electrum has LNURL not implemented it yet. You find a list of LNURL capable wallets and solutions here: https://github.com/fiatjaf/awesome-lnurl

Awesome things done with lightning's lnurl protocol

Yes use a wallet that supports lnurl-auth. Full list here: https://github.com/fiatjaf/awesome-lnurl

Yes, but sender is not required to use Strike. Also, it's Strike API, not Strike app, but API details are not public, likely you will be able to link your account with other wallets too. With LNURL it should be possible.

I really like all the new things that keep popping up, like Lightning Address, and the lnurl protocol

The lnurl protocol makes things extremely smooth and nice. Also you can use Lightning wallets for authentication, and so many cool things keep popping up all the time, like Lightning Address so that you can setup a payment through lightning to any "internet static identifier" like an email, telegram username, whatever.

This faucet uses one of the new protocols for lightning, lnurl, and it makes the transfer of Bitcoin with Lightning literally as easy as clicking a link.