211
Microsoft Authenticator Spams Sign-In Requests Without Even Needing Your Password - André Klein Dot Net (andreklein.net)
submitted 2 months ago by to c/technology@lemmy.world
34 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 2 months ago (3 children)

This is why I've always preferred to enter the TOTP code myself instead of using the "Approve Sign-In" method.

Also the thing about the Redirect Loops and wacky login forms. Goddamn how come they ain't fix it yet 😭

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 4 points 2 months ago (1 child)

    Using a lot of ms services at work. If I leave 10 tabs open, I get 10 individual login popups in the morning. I like to assume there is some reason behind this I'm too dumb to understand, because it is very obviously not good UX and very annoying.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 months ago

    Token expiry. Because the same login token is used across many services, it expires at the same time. Of course, because the tabs are all open, they just know you need to log in again, not whether you've got other services open that also use your account.

  • permalink
  • fedilink
  • source
  • parent