[bhdlr]

So - the moral of the story is to never use Windows?

[sjfjsjdjwvwvc]

Or don’t use their „security“ features. AFAICT everything would have been fine if they used a hardware key as second factor.

[lxgr]

How do you know which app is accessing your hardware key in the absence of any OS feature mediating access to it?