iiiiiiitttttttttttt

960 readers

25 users here now

you know the computer thing is it plugged in?

A community for memes and posts about tech and IT related rage.

founded 3 months ago

MODERATORS

irelephant@programming.dev

Irelephant@lemm.ee

534

Just Microsoft Things™ (infosec.pub)

submitted 3 months ago by irelephant@programming.dev to c/iiiiiiitttttttttttt@programming.dev

89 comments fedilink hide all child comments

Transcript

A wafrn woot (post) by @tinker@infosec.exchange saying "Microsoft Authenticator needs me to validate with Authenticator in order to log in with Authenticator to use it to authenticate another app with Authenticator. Here is the app telling me to open itself to validate itself with itself. #infosec #iHateComputers" It has a screenshot showing the microsoft authenticator app.

you are viewing a single comment's thread
view the rest of the comments

[–] Tash@lemmy.world 79 points 3 months ago (6 children)

Pretty sure you have another device registered with Authenticator here, and it is asking you to verify against that.

It would be bad if somebody could just steal your username/password and then register their own MFA, right?

[–] SchwertImStein@lemmy.dbzer0.com 11 points 3 months ago (2 children)

thanks for claryfing that, it makes the post really dumb

[–] baggins@lemmy.ca 5 points 3 months ago (1 children)

This is a legit problem with authenticator. My work phone was wiped and I had to have my authenticator reset because it got stuck in the same loop.

[–] Hotzilla@sopuli.xyz 0 points 3 months ago

Well, if the MFA device is not available, reset is the only way. If user would be able to bypass the lost device, the whole thing would be vulnerable.

Whole MFA is of course really f stupid, but it is best we got against phishing.

load more comments (3 replies)