Hacker News new | ask | show | jobs
by Sami_Lehtinen 3613 days ago
MS 2FA fails, you can still use IMAP to fetch email and stuff, without 2FA. So it's only partial implementation. Of course it prevents "completely taking over the account", but even if it's enabled you can still do a lot without providing 2FA code.