this post was submitted on 03 Jul 2026
210 points (98.6% liked)

Technology

6986 readers
481 users here now

News community around technology, social media platforms, information technology and governmental policy surrounding it.

What doesn't fit here?

The core of the story has to be technology focused.


Post guidelines

Title formatPost title should mirror the news source title. If you don't like the title of article, look for an alternative source instead of editorializing it.
URL formatPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
[Opinion] prefixOpinion (op-ed) articles must use [Opinion] prefix before the title. Opinion articles refer to articles that their publisher doesn't explictly endorse.
Country prefixCountry prefix can be added to the title with a separator (|, :, etc.) if the news is from a local publisher who doesn't clearly mention the country.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

!globalnews@lemmy.zip
!interestingshare@lemmy.zip


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @brikox@lemmy.zip.

founded 2 years ago
MODERATORS
 

Microsoft warns Authenticator will block rooted Android and jailbroken iOS, verify if your phone is affected.

top 50 comments
sorted by: hot top controversial new old
[–] BurgerBaron@quokk.au 9 points 10 hours ago (1 children)

I don't use my account for email anymore or use Windows very often but I just changed the two factor authenticator to Aegis. They make the text to use an alternative authenticator app tiny blue hyperlink text but you can do it confirmed.

[–] EnsignWashout@startrek.website 2 points 3 hours ago

Yes. I also switched to Aegis.

[–] baguettefish@discuss.tchncs.de 37 points 16 hours ago

microsoft truly hates productivity in the workplace

[–] qupada@fedia.io 42 points 17 hours ago

I can guarantee this will be a hilarious shitstorm of false positives wasting IT departments' time, because their detection of it is massively flawed.

At least once a month my - completely stock, and un-rooted - phone tells me I can't use Outlook/Teams because of root. Every time, a reboot is required to resolve this. One one occasion, TWO reboots.

Ignoring whatever reason Microsoft think they're blocking this for, it's going to regularly block regular users, who are not going to stand for it.

[–] turkishcryptid@lemmy.zip 19 points 17 hours ago

They somehow trying to eliminate everything they cannot control, funny

[–] Wizard_Pope@lemmy.world 64 points 21 hours ago* (last edited 21 hours ago) (8 children)

Why would you use microsoft Authenticator anyway? There are other options

[–] BCsven@lemmy.ca 2 points 1 hour ago

I had a yubikey as my hardware authentication, then a coworkers email got hacked so IT moved us all to Microsoft authenticator, so now I have a less secure login method LOL

[–] ThunderLegend@sh.itjust.works 4 points 8 hours ago (2 children)

I had to use it for my work. They required MS authenticator. I think it's bullshit and tried to export my 2fa to bitwarden. I couldn't. And to add another 2fa .method I need to call support so I gave it up

[–] 79WistfulVista@lemmy.zip 1 points 1 hour ago* (last edited 1 hour ago)

They don't let you use https://mysignins.microsoft.com/ to replace/add MFA methods? That site was very useful at my last employer, as I was switching phones often.

[–] blargh513@sh.itjust.works 13 points 13 hours ago

Some organizations require authenticator; they don't just use it for MFA codes, it's goes deeper than that.

Also, most large enterprise fall for the stupid Microsoft trap. They buy enterpise licensing in bulk (E3, E5, whatever) and bosses who have no brains will say "well, let's use more microsoft products since they're 'free'". The trap is that, yes, your enterprise license agreement includes entitlements to a lot of their stuff, but they nickle and dime you on stupid shit like the storage so you can keep the logging and telemetry data you typically need for security, troubleshooting and some audit requirements.

I can't imagine ever using any of their shit beyond Office products. Their security software is crap compared to most offerings, they still seem to think that networks are bad so we should do as little as possible about them. Azure is just a completely uncontrollable money drain (by design) that is damn near impossible to secure properly once you give developers enough access to actually do their jobs.

I've been working in security for a long time now and they continue to be such a fucking liability and drain on money at every turn. If I ran the zoo, I would switch the entire enteprise to Linux and find just about any other collaboration suite to use.

Fuck Excel and fuck you if all you do with it is make lists. Fuck powerpoint and fuck every boss who is too dumb to read and only can accept information when it is spoon fed to them in a deck. Word is OK, but nobody reads anymore so what's the point?

[–] skooma_king@piefed.social 59 points 20 hours ago (26 children)
[–] Korhaka@sopuli.xyz 13 points 19 hours ago* (last edited 19 hours ago)

I don't really mind using shit software on work devices. Yes it's slow and inefficient, I spent half an hour today on Windows doing what would be a very short command on Linux. Fuck it, get paid the same. I just use Linux at home in my own time.

I'll point out better software exists. If I don't get support in changing it or allowed to change it, fuck it. It's on them at that point.

load more comments (25 replies)
load more comments (4 replies)
[–] MrSulu@lemmy.ml 9 points 15 hours ago (2 children)

It may be painful but a switch to Ente Auth or similar is a must

[–] kazerniel@lemmy.world 1 points 1 hour ago

Yeah that's my choice too bc it offers access from my desktop browser too, not just the mobile app. Tying accounts to a single device makes me uncomfortable.

[–] ohshit604@sh.itjust.works 5 points 13 hours ago (2 children)
[–] 45o3b@lemmy.ml 1 points 6 hours ago (2 children)

They're not mutually exclusive. Yubikey is great for passkeys and Ente Auth is great for 2FA.

[–] ohshit604@sh.itjust.works 2 points 2 hours ago* (last edited 2 hours ago)

FIDO U2F, WebAuth and OTP are supported by Yubikey’s. That’s what makes them inherently more secure than the digital-only solutions available, you need the physical key to authenticate accounts.

[–] jsnfwlr@lemmy.ml 2 points 5 hours ago

Yubikey also has a 2FA app that is unlocked by your actual yubikey

[–] MrSulu@lemmy.ml 2 points 10 hours ago

I do keep looking at this, but then stick with Ente Auth for no better reason than no issues so far. Will look again

[–] lemmysmash@beehaw.org 27 points 20 hours ago (5 children)

Fuck all these totalitarian corpos.

load more comments (5 replies)
[–] saltesc@lemmy.world 11 points 18 hours ago* (last edited 18 hours ago) (1 children)

Ths is gonna cause some fun at work. I know our IT team would not be on top of this until one day a portion of employees can't SSO in. Then mayhem will ensue by heels being dug on both sides.

[–] halcyoncmdr@piefed.social 3 points 10 hours ago

Your company should be issuing devices if employees need to use apps like that. IT issued equipment shouldn't be jailbroken or rooted, it should be managed via MDM.

Otherwise they deserve it for trying to cut corners by having employees use personal devices. If they're doing that, they're almost certainly not paying for the work use of those devices either.

load more comments
view more: next ›