News for hackers. Stuff that matters.

A comment on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out. Parent comment

Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by kayodelycaon on Sunday August 18, 2024 @08:41AM (#41282032)
And the rest of the world hasn’t gotten the memo. Rotating passwords was best practice for so long that every standard required it. Those haven’t been updated. Until it’s considered to be actively harmful and you fail audits for it, it won’t die. :(
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by Tostino on Sunday August 18, 2024 @09:09AM (#41282155)
I had to push back at my company after getting acquired multiple times that no, I am not implementing your much worse password policies that NIST has argued against for years.

All because some 15 year old security document said that's what all their products adhere to.

[ Parent | on HN ]