oooo, someone genuinely has found my microsoft password

i've gotten 17 2fa emails in the past two days

Someone broke into mine a while back. I just got an email about a suspicious login, then I checked my account activity and sure enough IPs from all over the world had been attempting to login every day for months. They finally figured it out.

I see a bunch of attempts from all over the place, but it looks like just one per location. I'd guess it's someone going through one of those leaked password databases and hoping to find someone who reuses the same password everywhere. Sorry, pal, I don't do that. And you're a little late, someone else has probably already done that with that entire list.

ConfusedTorchic posted...

i've gotten 17 2fa emails in the past two days

Those are so fucking irritating. They don't need your password. They just go to the site and it sends you the email. Entering a password is optional now. They default to the email solution. Its very irritating. What they have stolen is your email address, and they will spam you over and over until you accidentally approve one of them out of fatigue.
I get one every 15 minutes or so. What I ended up doing is adding Microsoft authenticator as my 2fa, and removing email. The log still shows them logging in over and over, but it has stopped bothering me about it. It's weird because when you go to the site, instead of saying send email login, it says send authenticator app login. And the bots never click it I guess because I don't get a notification. It's been several years now, every 15 minutes. Every single request from somewhere other than Canada. You''d think Microsoft would have an option to just block other countries but nope. So they take a hit every 15 minutes.

well unfortunately for them, i don't know how to provide them with the 6 digit code i was sent so there's nothing to approve on my end for them

the 6 digit code i only ever get after i get passed the password entry, btw.

it wasn't me

Was it 123456?

I'm sure we're at a point where almost every person's information has been leaked in any one of the dozens of massive, high profile data breaches.

I feel like there needs to be an immediate overhaul of how identity is verified. 2FA can buy us some time but it's not without its shortcomings as well. I'm not sure what the answer is.

ConfusedTorchic posted...

i've gotten 17 2fa emails in the past two days

2fa is so incredibly important to have enabled on anything important.

JOExHIGASHI posted...

Was it 123456?

no

one was 513800 though