It is difficult to express how bad microsoft’s authentication system is.
Uncategorized
15
Posts
2
Posters
0
Views
-
I helped one of my kid’s friend’s parents buy a copy of Minecraft today and I wasn’t counting but I would honestly guess that in that process — which took *at least* 90 minutes — they got and responded to at minimum 10 push notifications, had to enter 15 authentication codes, and provisioned 2 passkeys (only one of them on purpose)
*I* accidentally provisioned a passkey in this process somehow and I wasn’t even the one trying to authenticate
-
the passkey provisioning was at the end of my login process, which used github, and I authenticated to github using a passkey (a different passkey of course)
if this is how most people encounter passkeys it’s no wonder that they fucking hate them. it feels like getting tricked. because it is getting tricked. I was tricked
-
if this is how most people encounter passkeys it’s no wonder that they fucking hate them. it feels like getting tricked. because it is getting tricked. I was tricked
at the end of the process we needed to go to the xbox settings page which you get to by going to the xbox account page, and then to the settings of the account page, and then the account settings of the settings account
-
I can’t even describe how ridiculous the series of steps are that are required to enable multiplayer on java minecraft for an account of someone under 12. literally 100% of the labels on the relevant options are simply incorrect. there are constant references to “xbox” when nothing here is even vaguely related to xbox. this is a java game on a macintosh computer with multiplayer on my LAN. the text in the tooltip on the disabled multiplayer button also gives inaccurate instructions for fixing it
once you’ve fixed the setting it obviously isn’t reflected in the game. in order to enable this functionality you need to quit the game, log out of the launcher, quit the launcher, *reboot your computer* apparently, and then launch the launcher, ans reauthenticate in the launcher BUT NOT IN A WEB BROWSER. don’t do it too fast though, gotta give the sync state time to replicate through some opaque backend
-
at the end of the process we needed to go to the xbox settings page which you get to by going to the xbox account page, and then to the settings of the account page, and then the account settings of the settings account
I can’t even describe how ridiculous the series of steps are that are required to enable multiplayer on java minecraft for an account of someone under 12. literally 100% of the labels on the relevant options are simply incorrect. there are constant references to “xbox” when nothing here is even vaguely related to xbox. this is a java game on a macintosh computer with multiplayer on my LAN. the text in the tooltip on the disabled multiplayer button also gives inaccurate instructions for fixing it
-
once you’ve fixed the setting it obviously isn’t reflected in the game. in order to enable this functionality you need to quit the game, log out of the launcher, quit the launcher, *reboot your computer* apparently, and then launch the launcher, ans reauthenticate in the launcher BUT NOT IN A WEB BROWSER. don’t do it too fast though, gotta give the sync state time to replicate through some opaque backend
don’t even get me started on the part where we accidentally bought an extra copy of the game due to an absolutely broken handoff between the launcher app and the web browser
-
don’t even get me started on the part where we accidentally bought an extra copy of the game due to an absolutely broken handoff between the launcher app and the web browser
this has nothing to do with copilot or AI or any specific systemic issue. it’s just a mountain of really infuriating but ultimately mundane failures. it’s tempting to diagnose some reason for this but it’s so badly broken that I really can’t imagine how it got this bad
-
like you know all these fun facts about how every extra tenth of a millisecond on a page load decreases your conversion rate by 5%? this was over an hour of own-goal disasters. completing this purchase felt like being a six-sigma outlier on the conversion probability curve
granted, probably 1/3 of the difficulties here have to do with microsoft’s ill-conceived “think of the children” account system, and buying the game as a regular adult with a single account would have been massively easier. but still, you’d think that a PM somewhere in the org would have considered that it is *possible* that a child might want to play … minecraft
-
this has nothing to do with copilot or AI or any specific systemic issue. it’s just a mountain of really infuriating but ultimately mundane failures. it’s tempting to diagnose some reason for this but it’s so badly broken that I really can’t imagine how it got this bad
like you know all these fun facts about how every extra tenth of a millisecond on a page load decreases your conversion rate by 5%? this was over an hour of own-goal disasters. completing this purchase felt like being a six-sigma outlier on the conversion probability curve
-
granted, probably 1/3 of the difficulties here have to do with microsoft’s ill-conceived “think of the children” account system, and buying the game as a regular adult with a single account would have been massively easier. but still, you’d think that a PM somewhere in the org would have considered that it is *possible* that a child might want to play … minecraft
the folks trying to get open source developers to boycott github are barking up the wrong tree. just get an agent hired at microsoft who internally advocates to remove unnecessary duplication in the login systems. get a promo out of it, it totally makes business sense. require every current github user to use login dot live dot com. 50% marketshare reduction within the year, I guarantee you
-
undefined aeva@mastodon.gamedev.place shared this topic
-
I helped one of my kid’s friend’s parents buy a copy of Minecraft today and I wasn’t counting but I would honestly guess that in that process — which took *at least* 90 minutes — they got and responded to at minimum 10 push notifications, had to enter 15 authentication codes, and provisioned 2 passkeys (only one of them on purpose)
@glyph I vaguely recall that microsoft has a company-wide mandate enforced by performance evaluations for all employees to "improve security". considering that security is a purely additive concept, it stands to reason that every new "two" factor challenge "improves security"
-
@glyph I vaguely recall that microsoft has a company-wide mandate enforced by performance evaluations for all employees to "improve security". considering that security is a purely additive concept, it stands to reason that every new "two" factor challenge "improves security"
@glyph i had no idea this is what it was like to buy minecraft though. i just figured Vendor Account, who works from home and solves 10,000 "two" factor challenges a second, was just a statistical error.
-
undefined oblomov@sociale.network shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@kigen libri/manuali/percorsi da consigliare?
-
Catching up with 3 weeks of infosec news is quite the struggle... you people have been busy
-
Oggi è il mio settimo veganiversario e offrirò una pizza agli amici
-
Eccoci qua a rompere le scatole un'altra volta ma sempre per lo stesso motivo: un paese più giusto.
12 dicembre, sciopero generale contro la la finanziaria.
-
-
@mariosiniscalchi In abbondante compagnia.
-
Leonardo: Tutti uguali davanti alla legge – ma davanti a Delrio?
"No, onorevole, io non paragono Netanyahu a un nazista. Non ne ho bisogno, il nazismo è la risorsa dei polemisti senza fantasia. Ho così tante parole e argomenti per definire Netanyahu, che se le usassi qui ora tutte probabilmente sarebbe lei a implorarmi di dargli del nazista e farla finita."
https://leonardo.blogspot.com/2025/12/tutti-uguali-davanti-alla-legge-ma.html?m=1
-
Some months ago, I was stripped of the managing of a website in a rather unfriendly manner. Now I would like to know how many visitors it has. Do you know how this can be done, approximately of course?
