145
submitted 2 days ago by schizoidman@lemmy.zip to c/android@lemdro.id
top 21 comments
sorted by: hot top new old
[-] darklamer@feddit.org 51 points 2 days ago

Shall I pretend to be surprised by a Microsoft product having a fatal security flaw?

[-] Ephera@lemmy.ml 9 points 2 days ago* (last edited 2 days ago)

Yeah, I'm just annoyed that they keep trying to develop critical infrastructure when they've had structural problems at doing precisely that for multiple decades already...

[-] Bluegrass_Addict@lemmy.ca 7 points 2 days ago* (last edited 2 days ago)

at this point, I feel it's all on purpose and these articles are just telling their criminal friends they are closing it so use the next ones

[-] Tollana1234567@lemmy.today 0 points 2 days ago

they are more concerned about putting Ai in to everything.

[-] neclimdul@lemmy.world 28 points 2 days ago

The incident highlights Microsoft’s ongoing efforts to protect Entra credentials on rooted Android and jailbroken iOS devices, where malware and weakened security controls increase enterprise identity risks.

oh come on... this had nothing to do with rooted devices. sounds like a rooted device could still snoop this after tge fix.

I able to run Authenticator in a work sandbox because I'm rooted but have to use it. That means my rooted device protected your dumb apps from my personal apps. what a load of fud.

[-] possiblylinux127@lemmy.zip 23 points 2 days ago

Can we stop having security issues for at least a week?

Thanks

[-] Bytemeister@lemmy.world 14 points 2 days ago

We've automated all aspects of the security issue cycle. All the computer power we will build this decade will work as fast as possible to create slop code, find holes in it, slop together some more code, find holes in it... And so on.

At a certain point, patching your software will become impractical. Critical updates will have lifecycles measured in minutes. At this point, you'll just have a permanently running update service that writes new patches on the fly, it will communicate with a distributed network of AIs that are telling your local computer what the security flaws are and how to fix them, multiple times a second. Security will suddenly be about having the network and computational powert to keep up. Attckers will be using the same tools to find the same holes at the same time as the defenders. Being able to write your patches (or exploits) faster that the other system is what hacking will become. Just raw computational power duking it out.

I don't know if any of this will be true, I just kinda made it up, but it sounds good enough.

[-] derpgon@programming.dev 9 points 2 days ago

Games taught me that all you will need is to have enough investment in Hacking skill, and then you are just a minigame away.

[-] apparia@discuss.tchncs.de 2 points 2 days ago* (last edited 2 days ago)

Unless AI fully breaks cryptography, in that scenario we'd surely converge quickly to actually having mathematically infallible security on the blue team side? Software is finite, thus, software flaws are finite.

[-] Turret3857@infosec.pub 17 points 2 days ago
[-] neclimdul@lemmy.world 10 points 2 days ago

Unfortunately, most people that have this fall into two, maybe 3 camps

  1. work installed it and i use it because they said to
  2. work uses proprietary MS mfa so i have to
  3. Actually likes Microsoft?

source, I'm in camp 2

[-] psud@aussie.zone 1 points 7 hours ago* (last edited 7 hours ago)

It's the only one that offers* backup so you can restore authentication from one phone to another when your main phone fails and it's not recoverable or falls into the ocean or something

Only now they say you can only restore to the same phone ecosystem (Apple to Apple, Android to Android) so I'd need to change login settings on about twenty services (including work which requires we use it) before I could change to an iPhone

* or only one that I could find that did when I was choosing authenticators

[-] NicoCharrua@lemmy.ca 7 points 2 days ago
  1. Installed it because it's the recommended one when signing up for a Microsoft account even though they let you use other authenticators

Source: most people in my college

[-] neclimdul@lemmy.world 2 points 2 days ago* (last edited 2 days ago)

Yeah i think thats probably a variation of 1 but fair enough.

For normal TOTP thats the equivalent of "we recommend Edge" which sounds silly to anyone that understands browsers but not everyday knowledge.

[-] jeansburger@piefed.world 4 points 2 days ago

Anyone who is in camp 3 is a literal sociopath...

[-] CMDR_Horn@lemmy.world 14 points 2 days ago

Best part is Microsoft reprompting me 3 times in a row each time i open the browser when connecting with my elevated account....f m$

[-] Hakuso@scribe.disroot.org 4 points 2 days ago

They do have TOTP as an option...

They juat push that stupid app.

[-] KlavKalashj@lemmy.world 7 points 2 days ago

I used to be able to log into my work account with TOTP, I used my Bitwarden. Recently somebody changed something, and now Authenticator is enforced. As a bonus, I don't yet have a work device so they are trying to force me to have it on my personal phone... fat chance

[-] finalarbiter@lemmy.dbzer0.com 4 points 2 days ago

They do? My work account is forced to use the app, I can't seem to change it to TOTP

[-] Hakuso@scribe.disroot.org 8 points 2 days ago

Quite possible that's a setting by your admin, my MS.account gers 2FA from Aegis.

[-] JustEnoughDucks@feddit.nl 2 points 2 days ago

Did IT on the side at my last job.

The Microsoft authenticator push notifications are the thing that they have integrated into other products (for us it was the VPN) so we were forced to use authenticator instead of TOTO because otherwise the VPN wouldn't authenticate with how they set it up...

I am just happy I pushed for bitwarden for so long so people can stop using Name2026! Format and other crap.

this post was submitted on 29 Oct 2026
145 points (99.3% liked)

Android

22284 readers
530 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

🔗Universal Link: !android@lemdro.id


💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: !askandroid@lemdro.id

For fresh communities, lemmy apps, and instance updates: !lemdroid@lemdro.id

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to !askandroid@lemdro.id.

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to !androidmemes@lemdro.id.

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 3 years ago
MODERATORS