Microsoft: You need to fix your Skype and Microsoft account issues, this is insane

Re:Microsoft: You need to fix your Skype and Microsoft accou... by kayoone on Thursday April 20, 2017 @02:54PM (#14159673)

this is not even touching on the security issues that arise from the fact skype does not support 2FA and the merged legacy accounts remain vulnerable.

[ Parent | on HN ]

Re:Microsoft: You need to fix your Skype and Microsoft accou... by hpshelton on Thursday April 20, 2017 @06:13PM (#14161392)

You can disable login from secondary emails, recovery emails, your phone number, etc. using https://account.live.com/SignInPreferences.

[ Parent | on HN ]

Re:Microsoft: You need to fix your Skype and Microsoft accou... by devereaux on Thursday April 20, 2017 @03:44PM (#14160140)

What do you mean?

If you have a outlook.com email, a merged a legacy skype account, and 2FA, what is the attack method that can be used against you?

[ Parent | on HN ]

Re:Microsoft: You need to fix your Skype and Microsoft accou... by thewavelength on Thursday April 20, 2017 @05:29PM (#14161110)

As of my knowledge, you can log in to Skype without 2FA using an outlook.com-email-address even though it has 2FA enabled.

[ Parent | on HN ]

Re:Microsoft: You need to fix your Skype and Microsoft accou... by hpshelton on Thursday April 20, 2017 @06:11PM (#14161369)

If you have proof of a repro for this, please reach out to our security team(s), but to the best of my knowledge this is false. 2FA works on both regular and merged Skype and Microsoft Accounts on all endpoints.

[ Parent | on HN ]