leif2
Re:Pin Bypass in Passwordless WebAuthn on Microsoft.com and Nextcloud
on Wednesday August 12, 2020 @11:20AM (#24132921)
Looks like Microsoft doesn't understand the specification that they wrote down themselves: It is a bug if an attacker can take over my entire Microsoft account via NFC. I wonder if Microsoft can make amends for any damage it causes. Credit card companies can do this and that's why some NFC payments are only 1FA.