News for hackers. Stuff that matters.

A comment on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out. Parent comment

Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by pasquinelli on Sunday August 18, 2024 @01:20AM (#41280283)
i just had it happen day before yesterday to create an account for a service to do a background check for a new job. it rejected my password without saying why and i could only get past it by shortening it to 15 characters.

and then the deeper question is, why do i need to create an account for this?

[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by bongodongobob on Sunday August 18, 2024 @01:39AM (#41280346)
Not defending the max length, that's stupid and probably some old AS400 thing that got built into the system, but the account is for auditing obviously.
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by pasquinelli on Sunday August 18, 2024 @04:54PM (#41285424)
i don't see what's obvious. what is being audited? why is my email address needed when i'm giving them my id and ssn?
[ Parent | on HN ]