pejacoby · @pejacoby
94 followers · 295 posts · Server infosec.exchange

Discovered this excellent write up from 2019 explaining why MS Authenticator didn't work for TOTP with _one_ of our in-house systems.

Blindly accepts QR codes for configurations it DOESN'T EVEN SUPPORT. Still, 3 1/2 years later.

labanskoller.se/blog/2019/07/1

#mfa #doitright #errormessagesareuseful

Last updated 2 years ago