Earlier quoted context omitted.
And you think that’s a reasonable solution for all of the billion+ people that login to some kind of cloud services?
Perfect is the enemy of good. Can you explain any solution for any problem that is reasonable for ALL of the billion+ people that login to some kind of cloud service? ;)
Gitlab Support is no longer processing MFA resets for free users
221–228 of 228 posts
Re: Gitlab Support is no longer processing MFA resets for free users
#222Earlier quoted context omitted.
This is a very niche case. Why can't you recieve sms abroad? Do you leave your phone behind when you travel? Why can't you give Google your current phone number?
Not OP but I face this problem: - Why can't you recieve sms abroad? Because I use e-sims and pay $10 for 30 days of data only vs. the $30 my provider would add to my bill for "global data". > Do you leave your phone behind when you travel? No, but I do leave my US number "dormant" in that i can't use it. > Why can't you give Google your current phone number? Because they already have a clear enough data picture of wh…
Re: Gitlab Support is no longer processing MFA resets for free users
#223Earlier quoted context omitted.
You can't screenshot it. The app puts a no screenshot request, so you have to scan the qr code from another phone.
What is the point of all these apps forbidding the screenshotting, when everybody needs exactly those QR codes screenshots?
Without it, he has 30 seconds to login and put the code by just opening the app and looking at the code.
Not much of a feature, but might help some users
Re: Gitlab Support is no longer processing MFA resets for free users
#224> I don’t like this and I want to tell someone. I'm sure this is meant to come across as maybe slightly tongue-in-cheek, and is also meant to provide users an outlet they feel they can vent in productively, but... it reads as dismissive, and leaves me with the impression that they don't actually care to hear any feedback.
Support Manager (and person who wrote that line) - it's certainly not meant to be dismissive or tongue in cheek. If you've got some suggested wording to help take away that feeling, I'm happy to submit (or merge) and MR to the blog post to make it feel less that way. We actually do want (and care) about your feedback and wanted to provide a clear way to give that. In the past we've gotten support requests, tweets, co…
I guess the core of my (admittedly petty) complaint about the language is that it doesn't really indicate a willingness to listen, more than it steers people towards a box in the corner they can vent into. A bit of language along the lines of "we think this is the right decision, but we're willing to reconsider" would maybe come off as more considerate, I guess?
Re: Gitlab Support is no longer processing MFA resets for free users
#225Earlier quoted context omitted.
> ... but also creates a new risk of completely losing access to your account and username forever. I may have misread the announcement, but it sounds like upgrading to a paid account recovers (npi) the ability to recover your account.
How does one upgrade their account if they cannot access it at all?
Or rather, at least as straightforward as the process is meant to be for existing paid-up customers, as per TFA.
Re: Gitlab Support is no longer processing MFA resets for free users
#226Earlier quoted context omitted.
Check the instructions at https://authy.com/guides/paypal/ . Those seem to work for me, I can indeed now add an authenticator app just as shown there.
Thanks, I think it worked. At least they are no longer asking me to confirm the mobile number, although I can't seem to delete the unconfirmed number so who knows if there is still a way to use it to take over the account :(. Along the way I found a disturbing number of TOTP utilities that want you to pass the key on the command line :(. I found this one as a simple version that doesn't do that and uses OpenSSL or Li…
Re: Gitlab Support is no longer processing MFA resets for free users
#227Earlier quoted context omitted.
Yeah, sure, set up a recovery process I don't need anywhere else in life and hope I never mess that up. Then have several thousand people (or far more if I'm lucky) rely on it, I'm sure that'll go well! I don't need recovery codes for anything in my professional nor personal life outside open source programming.
You don’t have any other MFAs you need to manage in your digital life? That seems ... odd. It seems like you’re deciding to make an issue of, well, how MFA is _supposed_ to work.
Re: Gitlab Support is no longer processing MFA resets for free users
#228Exactly just use a password no one is trying to hack your stuff, and the biggest risk is you. So sick of services that constantly tell me to use MFA. No I don’t want to and if I thought the service was that important I would use it.
no... and im not even going to explain why