News for hackers. Stuff that matters.
Re:Microsoft Authenticator Chrome Extention is not from MS a... by mrweasel on Tuesday May 18, 2021 @08:25AM (#27193680)
They could, but what sort of service doesn't allow you to sign up with a random domain? It also wouldn't be better if they had: [email protected], or are you suggesting just moving all microsoft.com emails to Google Workspace?

Perhaps it's like YouTube? You cannot buy or use a Youtube Premium subscription with a Google Workspace account. I tried inviting a family member to my Youtube Premium subscription, using her Google Workspace email. It doesn't work, because Youtube doesn't see it as a Gmail account.

Re:Microsoft Authenticator Chrome Extention is not from MS a... by kadoban on Tuesday May 18, 2021 @09:01AM (#27193984)
@gapps.microsoft.com would be at least better than a random unverifiable @gmail.com address. Google Workspace (is that what we're calling it this week?) lets you use subdomains right?
Re:Microsoft Authenticator Chrome Extention is not from MS a... by m0dest on Tuesday May 18, 2021 @11:29AM (#27195965)
Let's be real: getting legal and infosec to sign off on that is never going to happen. "We just need to borrow a subdomain of Microsoft.com, give control to our biggest competitor, and sign a contract with them... to get a vanity email address in their store."
Re:Microsoft Authenticator Chrome Extention is not from MS a... by kadoban on Tuesday May 18, 2021 @12:14PM (#27196777)
It's really not that big of a deal. You can still control the DNS and decide what you set up. And if Google screws you over, they'd be shooting themselves in the face.

All you'd need to actually work would be email, so some MX records on a subdomain. Is it ideal? No. Is it better than all of your users having no way to verify that a Chrome extension is actually you? Infinitely better.

Re:Microsoft Authenticator Chrome Extention is not from MS a... by blibble on Tuesday May 18, 2021 @01:06PM (#27197702)
opening a gmail account takes about 30 seconds

vs. months of emails and meetings for something that more or less achieves the same result

Re:Microsoft Authenticator Chrome Extention is not from MS a... by kadoban on Tuesday May 18, 2021 @02:01PM (#27198559)
Except it doesn't more or less achieve the same result. Also, if it legitimately takes months of meetings to get through something like that, there's a serious issue with your company/process.
Re:Microsoft Authenticator Chrome Extention is not from MS a... by blibble on Tuesday May 18, 2021 @04:32PM (#27200659)
> Also, if it legitimately takes months of meetings to get through something like that, there's a serious issue with your company/process.

ever wondered why these large companies end up running things on random domains?

this is why