Some necessary caveats: This kind of attack can only be pulled off in relatively narrow circumstances by a dedicated attacker. Segal said the user would need to have installed a malicious browser extension or be in transit and use public Wi-Fi where their traffic could be intercepted and decrypted through a MITM attack.
Well, okay. Maybe there's something new here, but despite the many paragraphs of exposition, this sounds like exactly the sort of cookie stealing attack that's been possible for decades.
Is the big breakthrough here that somebody realized FIDO doesn't change that? Like, uh, no kidding? What's new?
What is this "world of content" the author is talking about? 17 years ago, the streaming options on Netflix were the previous season of Friday Night Lights, and... that was it. A few years later they got The Office, but never the current season. So you were always behind. These articles never seem to include a graph of available content over time.