5 ms·

I can't say I'm a huge fan of Teams, but my god, have you used Zoom?

jbm 4y ago
At the risk of taking this off topic, yes, Teams is by far worse. Just the authorization process is shockingly bad. Here is a previous comment from k_sze about it. This is for a security process, so there is no excuse. https://news.ycombinator.com/item?id=30368431 https://news.ycombinator.com/item?id=30368431 > MFA fatigue wouldn't be such a big problem if their MFA and SSO implementation was not so utter shit. > Whenever I get a signin prompt, there is literally no way to tell what I'm signing in for. > When the MS Authenticator app receives a MFA request notification, there is, yet again, no way to tell what service the request is for. > To add insult to injury, when I need to signin again for a SharePoint guest account, it consistently fails to correctly redirect me back to the SharePoint folder. > Microsoft's MFA is just security theatre. Take MS Teams for instance. Why does it ask me to sign in again, and yet still allow me to read messages that are already on the screen? Worse yet, the MS Teams desktop app can still receive new message notifications and display them while I have not re-logged in yet.
- jiggawatts 4y ago
  In case anyone is interested and can control their Azure Active Directory tenant, there are now fixes for the unbelievable lack of information in the MFA popup prompt: "How to use additional context in Microsoft Authenticator app notifications (Preview)": https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-additional-context https://docs.microsoft.com/en-us/azure/active-directory/auth... ... and: "How to use number matching in multifactor authentication (MFA) notifications (Preview)": https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match https://docs.microsoft.com/en-us/azure/active-directory/auth... But note the "PREVIEW" status, which seems to be the permanent state of affairs for any Microsoft security feature. This doesn't excuse Microsoft in any way, but for any customers that are security conscious, at least now there are some options!
- pastaguy1 4y ago
  I can't really refute any of that, but I'm ok with Teams on balance. Our team used WebEx before, which was pretty bad, IMO, but some of that was probably due to it not being as tightly integrated as Teams was (we're a MS place). The one thing I agree is bad and irritating is the inboxing. I'll be actively conversing on my PC and suddenly my phone will regurgitate the last 20 messages.

jbm 4y ago

At the risk of taking this off topic, yes, Teams is by far worse. Just the authorization process is shockingly bad. Here is a previous comment from k_sze about it. This is for a security process, so there is no excuse. https://news.ycombinator.com/item?id=30368431 https://news.ycombinator.com/item?id=30368431 > MFA fatigue wouldn't be such a big problem if their MFA and SSO implementation was not so utter shit. > Whenever I get a signin prompt, there is literally no way to tell what I'm signing in for. > When the MS Authenticator app receives a MFA request notification, there is, yet again, no way to tell what service the request is for. > To add insult to injury, when I need to signin again for a SharePoint guest account, it consistently fails to correctly redirect me back to the SharePoint folder. > Microsoft's MFA is just security theatre. Take MS Teams for instance. Why does it ask me to sign in again, and yet still allow me to read messages that are already on the screen? Worse yet, the MS Teams desktop app can still receive new message notifications and display them while I have not re-logged in yet.

jiggawatts 4y ago
In case anyone is interested and can control their Azure Active Directory tenant, there are now fixes for the unbelievable lack of information in the MFA popup prompt: "How to use additional context in Microsoft Authenticator app notifications (Preview)": https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-additional-context https://docs.microsoft.com/en-us/azure/active-directory/auth... ... and: "How to use number matching in multifactor authentication (MFA) notifications (Preview)": https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match https://docs.microsoft.com/en-us/azure/active-directory/auth... But note the "PREVIEW" status, which seems to be the permanent state of affairs for any Microsoft security feature. This doesn't excuse Microsoft in any way, but for any customers that are security conscious, at least now there are some options!
pastaguy1 4y ago
I can't really refute any of that, but I'm ok with Teams on balance. Our team used WebEx before, which was pretty bad, IMO, but some of that was probably due to it not being as tightly integrated as Teams was (we're a MS place). The one thing I agree is bad and irritating is the inboxing. I'll be actively conversing on my PC and suddenly my phone will regurgitate the last 20 messages.