does everyone else's microsoft account activity look like this?
@BeAware ah ok thanks - just started using it again recently and didn't realize what a target it is
getting one-time code emails almost every day that i didn't initiate
@js I don't even get the codes. Just the failed logins on the activity page.
@js holy crap, yes. 2FA4TW
@mikeneumann seriously, that's how I noticed - I'm now getting a one-time code email almost every day that I did not initiate (!)
@js @mikeneumann So, they have your password?
@dave @js @mikeneumann are you implying that this DOESN'T happen to you?
If so, you're the only one out of 8 people so far. Pretty sure Microsoft security just sucks.
@BeAware @js @mikeneumann I don't usually play Xbox. But, when I do, I play from Brazil.
@mikeneumann @dave Ahh...no 2fa for me either.
@js might wanna change your password
Peru, nice
they should have a dashboard - too much data to use a paging list with huge item padding
also if this is widespread I would have thought they could point some ai sauce at it as a first line of defense
@js @BeAware @mikeneumann Occasionally, you step back and just realize how much of a train wreck the internet underbelly is.
@dave @mikeneumann I think (hope) it's them hitting the "forgot password" flow
@hellosteadman kind of psyched to see Iraq in there
@js yes, daily
@stefano ah ok thanks - just started using it again recently and didn't realize what a target it is
getting one-time code emails almost every day that i didn't initiate
@DrakkenZero new app idea...
@js oh wow. Yup, same here.
@lukem crazy, but glad it's there I guess
@js Yep. 2 attempts per hour it seems.
My username is 5 letters and a domain hotmail.com.
I do have 2FA of course.
@js Mine is clean
@js Yeah that tracks. I'm sooo forgetful when using my transporter.
@mrcopilot lol malta
@js Same here, I've had my account since 1997. Very glad I set up MFA
@js I haven't used this account for a long time but now I notice the same thing here. I checked my Google account and there is nothing like that.
@js yes. I made a new email alias and made that the sign on alias. I also switched to security key login and a much longer password as additional steps. I don’t get this account activity any more