Shall I pretend to be surprised by a Microsoft product having a fatal security flaw?
Yeah, I'm just annoyed that they keep trying to develop critical infrastructure when they've had structural problems at doing precisely that for multiple decades already...
at this point, I feel it's all on purpose and these articles are just telling their criminal friends they are closing it so use the next ones
they are more concerned about putting Ai in to everything.
The incident highlights Microsoft’s ongoing efforts to protect Entra credentials on rooted Android and jailbroken iOS devices, where malware and weakened security controls increase enterprise identity risks.
oh come on... this had nothing to do with rooted devices. sounds like a rooted device could still snoop this after tge fix.
I able to run Authenticator in a work sandbox because I'm rooted but have to use it. That means my rooted device protected your dumb apps from my personal apps. what a load of fud.
Can we stop having security issues for at least a week?
Thanks
We've automated all aspects of the security issue cycle. All the computer power we will build this decade will work as fast as possible to create slop code, find holes in it, slop together some more code, find holes in it... And so on.
At a certain point, patching your software will become impractical. Critical updates will have lifecycles measured in minutes. At this point, you'll just have a permanently running update service that writes new patches on the fly, it will communicate with a distributed network of AIs that are telling your local computer what the security flaws are and how to fix them, multiple times a second. Security will suddenly be about having the network and computational powert to keep up. Attckers will be using the same tools to find the same holes at the same time as the defenders. Being able to write your patches (or exploits) faster that the other system is what hacking will become. Just raw computational power duking it out.
I don't know if any of this will be true, I just kinda made it up, but it sounds good enough.
Games taught me that all you will need is to have enough investment in Hacking skill, and then you are just a minigame away.
Unless AI fully breaks cryptography, in that scenario we'd surely converge quickly to actually having mathematically infallible security on the blue team side? Software is finite, thus, software flaws are finite.
Unfortunately, most people that have this fall into two, maybe 3 camps
- work installed it and i use it because they said to
- work uses proprietary MS mfa so i have to
- Actually likes Microsoft?
source, I'm in camp 2
It's the only one that offers* backup so you can restore authentication from one phone to another when your main phone fails and it's not recoverable or falls into the ocean or something
Only now they say you can only restore to the same phone ecosystem (Apple to Apple, Android to Android) so I'd need to change login settings on about twenty services (including work which requires we use it) before I could change to an iPhone
* or only one that I could find that did when I was choosing authenticators
- Installed it because it's the recommended one when signing up for a Microsoft account even though they let you use other authenticators
Source: most people in my college
Yeah i think thats probably a variation of 1 but fair enough.
For normal TOTP thats the equivalent of "we recommend Edge" which sounds silly to anyone that understands browsers but not everyday knowledge.
Anyone who is in camp 3 is a literal sociopath...
Best part is Microsoft reprompting me 3 times in a row each time i open the browser when connecting with my elevated account....f m$
They do have TOTP as an option...
They juat push that stupid app.
I used to be able to log into my work account with TOTP, I used my Bitwarden. Recently somebody changed something, and now Authenticator is enforced. As a bonus, I don't yet have a work device so they are trying to force me to have it on my personal phone... fat chance
They do? My work account is forced to use the app, I can't seem to change it to TOTP
Quite possible that's a setting by your admin, my MS.account gers 2FA from Aegis.
Did IT on the side at my last job.
The Microsoft authenticator push notifications are the thing that they have integrated into other products (for us it was the VPN) so we were forced to use authenticator instead of TOTO because otherwise the VPN wouldn't authenticate with how they set it up...
I am just happy I pushed for bitwarden for so long so people can stop using Name2026! Format and other crap.
Android
The new home of /r/Android on Lemmy and the Fediverse!
Android news, reviews, tips, and discussions about rooting, tutorials, and apps.
🔗Universal Link: !android@lemdro.id
💡Content Philosophy:
Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.
Support, technical, or app related questions belong in: !askandroid@lemdro.id
For fresh communities, lemmy apps, and instance updates: !lemdroid@lemdro.id
📰Our communities below
Rules
-
Stay on topic: All posts should be related to the Android OS or ecosystem.
-
No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to !askandroid@lemdro.id.
-
Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to !androidmemes@lemdro.id.
-
No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.
-
No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.
-
No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.
-
No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.
-
No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.
-
No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!
-
No affiliate links: Posting affiliate links is not allowed.
Quick Links
Our Communities
- !askandroid@lemdro.id
- !androidmemes@lemdro.id
- !techkit@lemdro.id
- !google@lemdro.id
- !nothing@lemdro.id
- !googlepixel@lemdro.id
- !xiaomi@lemdro.id
- !sony@lemdro.id
- !samsung@lemdro.id
- !galaxywatch@lemdro.id
- !oneplus@lemdro.id
- !motorola@lemdro.id
- !meta@lemdro.id
- !apple@lemdro.id
- !microsoft@lemdro.id
- !chatgpt@lemdro.id
- !bing@lemdro.id
- !reddit@lemdro.id
Lemmy App List
Chat and More