Transcript

A wafrn woot (post) by @tinker@infosec.exchange saying “Microsoft Authenticator needs me to validate with Authenticator in order to log in with Authenticator to use it to authenticate another app with Authenticator. Here is the app telling me to open itself to validate itself with itself. #infosec #iHateComputers” It has a screenshot showing the microsoft authenticator app.

  • hdnsmbt@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    4 hours ago

    Yeah, I also had a beautiful moment trying to use Google’s find my phone feature in another country when I didn’t know my password. Used “password123” after that near nightmare.

    Security works best when it’s really easy to get into my account even though I don’t remember my credentials.

    • TrickDacy@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      1 hour ago

      I guess using strong and unique passwords on every account is the mark of a moron but true genius? That’s a company with some of the supposed best engineers in the world who needs you to have your fucking phone to find your fucking phone. What a great system! All hail Google and flawless security practice!

      • hdnsmbt@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        51 minutes ago

        Believe it or not, the best engineers in the world can’t help if you lose your backup codes. You know, the ones that you can use when you need MFA but don’t have your phone? Removing MFA because you had trouble one time “is the mark of a moron but true genius”.

        • TrickDacy@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          45 minutes ago

          Believe it or not, some people are only better with their security practices than 99.99% of humans instead of 99.999%. pfft, total idiots, right? Now let us pretend we are 100% muahahhahah so smart

          • hdnsmbt@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            36 minutes ago

            I have no idea what you’re trying to tell me, sorry. I do assume it was something totally devastating, though, so consider me totally devastated. You can stop the hostility now, I just made a joke at your expense, it’s not a big deal, honestly.

            Also, I highly recommend reactivating MFA on your account. It’s a good thing to have, generally. Yeah, it can suck when it doesn’t work but now you know how hard it is for someone unauthorized to get into your account.

      • hdnsmbt@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        54 minutes ago

        No, it’s not the same thing at all. It’s an analogous thing. Reducing account security because you lost your credential isn’t very smart and that’s the common denominator in both examples.

        • federal reverse@feddit.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          16 minutes ago

          The commenter above you had lost their phone and was supposed to log in using this same phone.

          They only got access to the account again due to chance, i.e. someone else found their phone.

          (There likely is some sort of backup mechanism, but apparently it’s sufficiently well hidden.)

    • TrickDacy@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 hour ago

      No the best system is if you try to find your phone without having your phone, a cybernetic lifeform should track you down and rip your spine out for trying to find your phone. Then some dipshit on the Internet without a shred of humanity can feel smugly superior about it

      • hdnsmbt@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        49 minutes ago

        some dipshit on the Internet without a shred of humanity

        Fuck right off, buddy. You confessed to making dumb security choices on the internet and got mocked for it, yeah. This has nothing to do with “oh the humanity!”