News for hackers. Stuff that matters.

A comment on Microsoft Authenticator Chrome Extention is not from MS and is phishing. Parent comment

Re:Microsoft Authenticator Chrome Extention is not from MS a... by kadoban on Tuesday May 18, 2021 @12:14PM (#27196777)
It's really not that big of a deal. You can still control the DNS and decide what you set up. And if Google screws you over, they'd be shooting themselves in the face.

All you'd need to actually work would be email, so some MX records on a subdomain. Is it ideal? No. Is it better than all of your users having no way to verify that a Chrome extension is actually you? Infinitely better.

[ Parent | on HN ]
Re:Microsoft Authenticator Chrome Extention is not from MS a... by blibble on Tuesday May 18, 2021 @01:06PM (#27197702)
opening a gmail account takes about 30 seconds

vs. months of emails and meetings for something that more or less achieves the same result

[ Parent | on HN ]
Re:Microsoft Authenticator Chrome Extention is not from MS a... by kadoban on Tuesday May 18, 2021 @02:01PM (#27198559)
Except it doesn't more or less achieve the same result. Also, if it legitimately takes months of meetings to get through something like that, there's a serious issue with your company/process.
[ Parent | on HN ]
Re:Microsoft Authenticator Chrome Extention is not from MS a... by blibble on Tuesday May 18, 2021 @04:32PM (#27200659)
> Also, if it legitimately takes months of meetings to get through something like that, there's a serious issue with your company/process.

ever wondered why these large companies end up running things on random domains?

this is why

[ Parent | on HN ]