aryan14

You can view the recent activity on your Microsoft account @ account(dot)live(dot)com/Activity

Would show any logins or security info updates etc

It’s just incorrect

It’s true that existing sessions are revoked; because the password was reset

The reason the target wouldn’t get any notifications at all would be in the case they never setup any additional verification methods to receive these notifications to, since this only worked on accounts w/o 2FA

You can test this on your own account, if you have 2FA enabled and reset your password, you’ll receive notifications to whatever option you have enabled

Also, if you reset the password, it doesn’t remove all 2FA methods on the account (you can test this)

So assuming a threat actor reset the password, they would attempt to login with the correct password but would still need the 2FA code or approval

> “In case you're wondering, because the system treats this high-privilege recovery flow as a total account reset by the "true" owner, the original 2FA gets thoroughly bypassed in the process.“

This is false.

Important to note this did not work if your account had 2FA of any kind

e.g if you had a time based authenticator enabled, after the AI gave you the code to reset the password, it had no notable privileges beyond that

Tldr; if you had 2FA this wouldn’t work on you

This is actually what microsoft does for microsoft accounts

If you recover a microsoft account / submit a ticket to recover it and provide correct information, the active email gets an email letting them know about the request

You can deny it, or if you ignore it for 30 days the request goes through

Seems to be the best system IMO

You can host your keepass db file anywhere you like, whether that’s google drive or on a hard drive.

How is this not bigger news?

And he has been and continues to make fun of the investigators, publicly mocking investigators and sending small amounts from the fraudulent wallets to investigators.

Crazy world

Was thinking about this the entire time, not sure why they’re saying it has to be govt sponsored threat actors for a bunch of SIM cards

Didn’t understand how it’d be used for espionage either, doesn’t even make sense

You could run wireguard thru CLI directly instead of jumping through the mullvad app itself

Doesn’t look good on mobile, difficult to use

Cross checked known malicious mail list with applicants, found a match and made a blog about it lol

Are the typos on purpose for opsec reasons?

This has probably been happening since the beginning of modern media.

The only reason this is an article is because of “AI” and Russia VS The US

This isn’t fair to say.

Any platform that’s popular will have its share of undesirable users, out of the company’s control.

Discord has very good moderation in contrast to other platforms (Constant banwaves on illegal/shady servers, terminating accounts frequently, etc)

How well it’ll do in court is debatable, could go for either side, but regardless of the outcome it’s always good to see resistance and pushback

As they should. You can’t throw an ultimatum for something that benefits nobody but the govt. and kick everyone around.

Would like to see other companies who were affected by similar situations also take this to court

Absolutely mental the kind of people that have power. Dealing with this like immature children.

“We don’t get what we want? We ruin it for everyone.”

Trying to backdoor a privacy feature for no real reason, just for the sake of having a backdoor. Pathetic

A very easy anonymous way is to simply use a self custody wallet like Exodus.

You can buy ETH, then you can use a TOR crypto exchange to swap it from ETH -> BTC into your wallet.

Just an idea though

How did it fail at being P2P e-cash?

You can use bitcoin completely/as anonymously as cash if you wanted to, the same way you’d have to put in a bit of effort to have a completely anonymous cash transaction.

Monero (XMR) which is a fork of bitcoin, is much closer to actual cash

Yep, even coinbase is stretching it to be honest since it’s still a centralized exchange, but still miles better then traditional options

Well if you need to send someone a sum of money instantly anywhere in the world for no fees, it’s kind of unrealistic to meetup with gold bars

Question was asking for companies doing well that weren’t exchanges.

Adding onto this:

BTC also has a limit on top of the release schedule, there is a limited amount of BTC that can ever be minted/in circulation.

You could say any currency is just a bunch of numbers, the US dollar isn’t backed by gold anymore and hasn’t been for a long time.

The question is more like: Would you let everyone dictate the value of a currency and leave it decentralized? Or would you rather a government controlled centralized currency.

It’s preference and opinion at the end of the day

Love the username

Decentralization helps a lot of people who may be under government pressure/being monitored, for example if you’re an anti-government russian journalist, you’d ideally use crypto as they would be able to freeze your assets.

Lots of citizens of sanctioned countries aren’t able to use their credit/debit cards to shop online outside of their country, paying with crypto or even using something like a SolCard fixes that.

It’s also generally convenient, there’s no other realistic and accessible way to transfer any sum of money, whether $10 or $10M, for a $2 fee nearly instantly.