News for hackers. Stuff that matters.

A comment on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out. Parent comment

Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by bongodongobob on Sunday August 18, 2024 @01:14AM (#41280254)
I'm not. The only time I've seen a maximum length password was like 10 years ago on Dell's IDRAC I think? I just don't think the complaints being thrown out here are good arguments.
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by tsimionescu on Sunday August 18, 2024 @02:18AM (#41280493)
Look at Microsoft's personal accounts (live.com or whatever they are calling it this week) - they still have this limit.
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by pasquinelli on Sunday August 18, 2024 @01:20AM (#41280283)
i just had it happen day before yesterday to create an account for a service to do a background check for a new job. it rejected my password without saying why and i could only get past it by shortening it to 15 characters.

and then the deeper question is, why do i need to create an account for this?

[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by bongodongobob on Sunday August 18, 2024 @01:39AM (#41280346)
Not defending the max length, that's stupid and probably some old AS400 thing that got built into the system, but the account is for auditing obviously.
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by pasquinelli on Sunday August 18, 2024 @04:54PM (#41285424)
i don't see what's obvious. what is being audited? why is my email address needed when i'm giving them my id and ssn?
[ Parent | on HN ]