211
Microsoft Authenticator Spams Sign-In Requests Without Even Needing Your Password - André Klein Dot Net (andreklein.net)
submitted 2 months ago by to c/technology@lemmy.world
34 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 2 months ago (3 children)

My MS account is doing a thing lately where I have to enter the TOTP twice to login successfuly. It has to be two different TOTPs, too, can't enter the same one; I have to literally wait until the first one expires and get another one.

Didn't experience any of the other shenanigans described in the article though, so there's that.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [+] 5 points 2 months ago (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 2 months ago

    I have the machine synced with NTP and I'm not seeing any time issues.

    It's such a super specific quirk, too, that I can't believe it's not on their side.

    Maybe they've decided that TOTP is less secure than passkeys and if I refuse to use passkeys with their app I should be "helped" 😃 by using twice the amount of TOTP?

  • permalink
  • fedilink
  • source
  • parent