podcastindex.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Intended for all stake holders of podcasting who are interested in improving the ecosystem

Administered by:

Server stats:

159
active users

John Spurlock

does everyone else's microsoft account activity look like this?

account.live.com/Activity

@BeAware ah ok thanks - just started using it again recently and didn't realize what a target it is

getting one-time code emails almost every day that i didn't initiate

@js I don't even get the codes. Just the failed logins on the activity page.🤷‍♂️

@js holy crap, yes. 2FA4TW

@mikeneumann seriously, that's how I noticed - I'm now getting a one-time code email almost every day that I did not initiate (!)

@js @mikeneumann So, they have your password?

@dave @js @mikeneumann are you implying that this DOESN'T happen to you? 🤨

If so, you're the only one out of 8 people so far. Pretty sure Microsoft security just sucks.

@BeAware @js @mikeneumann No, I'm getting hit too. I just don't get the 2-factor prompt:

@BeAware @js @mikeneumann I don't usually play Xbox. But, when I do, I play from Brazil.

@dave @BeAware @js same. No 2FA hit for me, either. I'm just glad that I have it set up.

@mikeneumann @dave Ahh...no 2fa for me either. 😳

@js might wanna change your password

@dave @BeAware @mikeneumann

Peru, nice

they should have a dashboard - too much data to use a paging list with huge item padding

also if this is widespread I would have thought they could point some ai sauce at it as a first line of defense

@js @BeAware @mikeneumann Occasionally, you step back and just realize how much of a train wreck the internet underbelly is.

@dave @mikeneumann I think (hope) it's them hitting the "forgot password" flow

@hellosteadman kind of psyched to see Iraq in there

@stefano ah ok thanks - just started using it again recently and didn't realize what a target it is

getting one-time code emails almost every day that i didn't initiate

@js I have a lot more Brazil than you do, but otherwise yep

@lukem crazy, but glad it's there I guess

@js Yep. 2 attempts per hour it seems.

My username is 5 letters and a domain hotmail.com.

I do have 2FA of course.

@js Yeah that tracks. I'm sooo forgetful when using my transporter.

@js Same here, I've had my account since 1997. Very glad I set up MFA

@js I haven't used this account for a long time but now I notice the same thing here. I checked my Google account and there is nothing like that.

@js yes. I made a new email alias and made that the sign on alias. I also switched to security key login and a much longer password as additional steps. I don’t get this account activity any more