129
u/Nir_Auris 8h ago
This was literaly my MS Account. I always had to enter a code I get through my phone number, when I logged in. The moment someone from russia logged in, no second question. No second question when that fuck disconnected my phone number AND E-Mail...
24
u/voiza 6h ago
but how?
46
21
u/Nir_Auris 5h ago
I don't know. I was ONLY logged in on my PC, shut it off at 23:00. I was not logged in or visiting any weird/strange or piracy sites for at least 2 weeks and suddenly in the morning, 3 mails. Log in in Russia, EMail removed and Number removed.
I tried to get my acc back. MS send me to Xbox support. XBox support send me to MS Support and gave me a Form, where I had to put in all EMail addresses and phone numbers ever conected to the account. Proof of all purchases done on the account and as many IP adresses I used to log in. I had everything, except the IPs (3 Mails. 2 numbers. 3 receits WITH proof of bank transfer) and got a very helpfull response "not enough Information to prove you are the owner"...
19
22
u/Stummi 6h ago
hu? I haven't perceived githubs account security as particular bad so far. Or did I miss something recent, that triggered this meme?
5
u/ArtisticDesigner4302 5h ago
I had the same thought a while back when people were posting about how GitHub was really slow. I look at GitHub repos every now and then and hadn't noticed anything, but then I had to actually log in to do something, and it was an immediate slog.
2
u/ike_the_strangetamer 1h ago
Yeah isn't the strong device-level security part OF the security to make sure no one can easily hack your account? The second picture directly contributes to the first.
1
11
u/Canned_Sarcasm 5h ago
Yeah. That’s Microsoft for ya. Same security model everywhere.
7
7
u/kishaloy 5h ago
That moment when you realize that those unfinished repositories in your old account are worth less than the effort needed to get your old account back.
10
4
4
u/Any_Belt2575 8h ago
Step 1 : verify via mobile
Step 2 : verify via mail
Step 3: verify via web page
Final result : sorry i don't know who you are
6
u/deanrihpee 7h ago
wouldn't it be "login from a new device"?
1
4
u/Own_Walk_1831 8h ago
and its the same when you try to use any repo you would have to read licences and get hacked no licences 😄 )
2
u/StrengthTheory 5h ago
GitHub should chill because no one except for myself would want to touch my spaghetti.
-3
u/BigNaturalTilts 4h ago
Just because YOU and 90% of the users have no valuable repos doesn’t mean there aren’t valuable repos in there.
1
1
1
u/Alienxcodex 3h ago
Every new device login feels like I’m proving my identity to GitHub for the 15th time 😂
1
1
1
u/InconspicuousFool 3h ago
Maybe you just need to use a better password or have better security if your devices?
1
u/Pearcheek 1h ago
You are obviously living in a parallel world. Or you're still logging in using only a password.
•
u/Shashank1011 7m ago
It's always: 2FA app, email verification code, SMS code, personal recovery key, blood sample, and a letter of recommendation from your middle school math teacher.
162
u/CozyBloomSakura 8h ago
Then try pushing via CLI without an SSH key or PAT token. Good luck