17 is very underwhelming anyways.

I'm on android 13, and my phone hasn't received updates in years.

And now computers are trending to be more like phone hardware... That's going to be a problem

Man, if only non-apple phone OSs were as easy to install and update as PC OSs are, those numbers would be very different

I know, but there are plenty of people who don't realize that and have avoided Debian because of it.

It won't even work with shizuku, you have to disable it.

It's also 5 years old at least, and the repo is pretty stale.

There's no advantage to this over shizuku + hail.

So, shiziku, but with a terminal?

Isn't this the feature that Google is planning to restrict?

I'm so sad :(

centrify?

Yeah i think thats probably a variation of 1 but fair enough.

For normal TOTP thats the equivalent of "we recommend Edge" which sounds silly to anyone that understands browsers but not everyday knowledge.

Unless AI fully breaks cryptography, in that scenario we'd surely converge quickly to actually having mathematically infallible security on the blue team side? Software is finite, thus, software flaws are finite.

Games taught me that all you will need is to have enough investment in Hacking skill, and then you are just a minigame away.

4. Installed it because it's the recommended one when signing up for a Microsoft account even though they let you use other authenticators

Source: most people in my college

Title is unnecessarily dismissive of the many nations it does affect. The named country is also one of many that it doesn't. The list is quite long: https://developer.android.com/registered-app-stores/faq#geographic-regions-registered-app-store

Starting December 1, 2026, Registered App Store status is available on Android 17 QPR2 and higher devices in the following regions:

Albania, Algeria, Angola, Antigua and Barbuda, Argentina, Armenia, Aruba, Australia, Austria, Azerbaijan, The Bahamas, Bahrain, Bangladesh, Belarus, Belgium, Belize, Benin, Bolivia, Bosnia and Herzegovina, Botswana, Brazil, Bulgaria, Burkina Faso, Cambodia, Cameroon, Canada, Cape Verde, Chile, Colombia, Costa Rica, Côte d'Ivoire, Croatia, Cuba, Cyprus, Czech Republic, Denmark, Dominican Republic, Ecuador, Egypt, El Salvador, Estonia, Fiji, Finland, France, Gabon, Germany, Ghana, Greece, Guatemala, Guinea-Bissau, Haiti, Honduras, Hong Kong, Hungary, Iceland, India, Indonesia, Iran, Republic of Ireland, Israel, Italy, Jamaica, Japan, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon, Liechtenstein, Lithuania, Luxembourg, Macau, Republic of Macedonia, Malaysia, Mali, Malta, Mauritius, Mexico, Moldova, Morocco, Mozambique, Myanmar, Namibia, Nepal, Netherland Antilles, Netherlands, New Zealand, Nicaragua, Niger, Nigeria, Norway, Oman, Pakistan, Panama, Papua New Guinea, Paraguay, Peru, Philippines, Poland, Portugal, Qatar, Romania, Russia, Rwanda, Saudi Arabia, Senegal, Serbia, Singapore, Slovakia, Slovenia, South Africa, South Korea, Spain, Sri Lanka, Sweden, Switzerland, Taiwan, Tajikistan, Tanzania, Thailand, Togo, Trinidad and Tobago, Tunisia, Turkey, Turkmenistan, Uganda, Ukraine, United Arab Emirates, United Kingdom, Uruguay, Uzbekistan, Venezuela, Vietnam, Yemen, Zambia, Zimbabwe

Anyone who is in camp 3 is a literal sociopath...

The incident highlights Microsoft’s ongoing efforts to protect Entra credentials on rooted Android and jailbroken iOS devices, where malware and weakened security controls increase enterprise identity risks.

oh come on... this had nothing to do with rooted devices. sounds like a rooted device could still snoop this after tge fix.

I able to run Authenticator in a work sandbox because I'm rooted but have to use it. That means my rooted device protected your dumb apps from my personal apps. what a load of fud.

Unfortunately, most people that have this fall into two, maybe 3 camps

1. work installed it and i use it because they said to
2. work uses proprietary MS mfa so i have to
3. Actually likes Microsoft?

source, I'm in camp 2

I used to be able to log into my work account with TOTP, I used my Bitwarden. Recently somebody changed something, and now Authenticator is enforced. As a bonus, I don't yet have a work device so they are trying to force me to have it on my personal phone... fat chance

We've automated all aspects of the security issue cycle. All the computer power we will build this decade will work as fast as possible to create slop code, find holes in it, slop together some more code, find holes in it... And so on.

At a certain point, patching your software will become impractical. Critical updates will have lifecycles measured in minutes. At this point, you'll just have a permanently running update service that writes new patches on the fly, it will communicate with a distributed network of AIs that are telling your local computer what the security flaws are and how to fix them, multiple times a second. Security will suddenly be about having the network and computational powert to keep up. Attckers will be using the same tools to find the same holes at the same time as the defenders. Being able to write your patches (or exploits) faster that the other system is what hacking will become. Just raw computational power duking it out.

I don't know if any of this will be true, I just kinda made it up, but it sounds good enough.

Best part is Microsoft reprompting me 3 times in a row each time i open the browser when connecting with my elevated account....f m$

Can we stop having security issues for at least a week?

Thanks

Debian pushes out security updates within hours when it is severe. Older packages doesnt mean unsupported

Quite possible that's a setting by your admin, my MS.account gers 2FA from Aegis.

They do? My work account is forced to use the app, I can't seem to change it to TOTP