this post was submitted on 01 Mar 2026
4 points (75.0% liked)

Microsoft

913 readers
9 users here now

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] SGforce@lemmy.ca 0 points 1 day ago (1 children)

This requires all authentication codes to be sent to the attacker in the first place. Why wouldn't they just put the code in themselves at that point?

[–] oantby@lemmy.today 1 points 23 hours ago

They don’t have an authentication code; just an identification code. You log in elsewhere and put in the code so Microsoft knows which device you actually want to log in on. Think e.g. logging into most streaming services on a Smart TV - get the code and take it to your phone, where you actually log in.