> the four-character PIN system used to access Microsoft services is insecure, because there is no limit on the number of attempts a user can make. I just trie

> the four-character PIN system used to access Microsoft services is insecure, because there is no limit on the number of attempts a user can make. I just tried logging in with my pin. After a handful of tries I was given a string to enter before I could try again. I did that. After another try I got told to restart the device before I could try again. So it doesn't look like 10 tries and locked out forever, but rather increasing penalties for incorrect attempts. Which is fine. oh and my pin is 6 characters long. If they don't have this right why should we believe them about any of their other claims?