Live data from Hacker News

Gitlab Support is no longer processing MFA resets for free users

about.gitlab.com

221–228 of 228 posts

Re: Gitlab Support is no longer processing MFA resets for free users

#221
post #185

Earlier quoted context omitted.

And you think that’s a reasonable solution for all of the billion+ people that login to some kind of cloud services?

Perfect is the enemy of good. Can you explain any solution for any problem that is reasonable for ALL of the billion+ people that login to some kind of cloud service? ;)

That's an argument that works well for getting an MVP out the door, not so well if a company decides to make their product worse to save a little money.

Re: Gitlab Support is no longer processing MFA resets for free users

#222
post #109

Earlier quoted context omitted.

This is a very niche case. Why can't you recieve sms abroad? Do you leave your phone behind when you travel? Why can't you give Google your current phone number?

Not OP but I face this problem: - Why can't you recieve sms abroad? Because I use e-sims and pay $10 for 30 days of data only vs. the $30 my provider would add to my bill for "global data". > Do you leave your phone behind when you travel? No, but I do leave my US number "dormant" in that i can't use it. > Why can't you give Google your current phone number? Because they already have a clear enough data picture of wh…

Can you give some more info on eSIMs, where you get them from, how much data they have, etc?

Re: Gitlab Support is no longer processing MFA resets for free users

#223
post #139
post #117

Earlier quoted context omitted.

You can't screenshot it. The app puts a no screenshot request, so you have to scan the qr code from another phone.

What is the point of all these apps forbidding the screenshotting, when everybody needs exactly those QR codes screenshots?

You give your phone to someone, then he just opens the app and sends the QR code screenshot to himself. He has the codes forever.

Without it, he has 30 seconds to login and put the code by just opening the app and looking at the code.

Not much of a feature, but might help some users

Re: Gitlab Support is no longer processing MFA resets for free users

#224
post #5

> I don’t like this and I want to tell someone. I'm sure this is meant to come across as maybe slightly tongue-in-cheek, and is also meant to provide users an outlet they feel they can vent in productively, but... it reads as dismissive, and leaves me with the impression that they don't actually care to hear any feedback.

Support Manager (and person who wrote that line) - it's certainly not meant to be dismissive or tongue in cheek. If you've got some suggested wording to help take away that feeling, I'm happy to submit (or merge) and MR to the blog post to make it feel less that way. We actually do want (and care) about your feedback and wanted to provide a clear way to give that. In the past we've gotten support requests, tweets, co…

Sorry, wrote that and then went offline for a couple of days. Perhaps it's my own cynicism about corporate engagement coming through, and that may be unfair given how open GitLab is as a company -- but the sentence beneath that heading just says "we're accepting community feedback, write your thoughts over here".

I guess the core of my (admittedly petty) complaint about the language is that it doesn't really indicate a willingness to listen, more than it steers people towards a box in the corner they can vent into. A bit of language along the lines of "we think this is the right decision, but we're willing to reconsider" would maybe come off as more considerate, I guess?

Re: Gitlab Support is no longer processing MFA resets for free users

#225
post #129

Earlier quoted context omitted.

> ... but also creates a new risk of completely losing access to your account and username forever. I may have misread the announcement, but it sounds like upgrading to a paid account recovers (npi) the ability to recover your account.

How does one upgrade their account if they cannot access it at all?

I suspect if one can a) exhibit genuine interest in becoming a customer waving their credit card around, and b) demonstrate ownership of 1FA for the account, then this would be relatively straightforward.

Or rather, at least as straightforward as the process is meant to be for existing paid-up customers, as per TFA.

Re: Gitlab Support is no longer processing MFA resets for free users

#226

Earlier quoted context omitted.

Check the instructions at https://authy.com/guides/paypal/ . Those seem to work for me, I can indeed now add an authenticator app just as shown there.

Thanks, I think it worked. At least they are no longer asking me to confirm the mobile number, although I can't seem to delete the unconfirmed number so who knows if there is still a way to use it to take over the account :(. Along the way I found a disturbing number of TOTP utilities that want you to pass the key on the command line :(. I found this one as a simple version that doesn't do that and uses OpenSSL or Li…

Nope, didn't fully work. The still won't let me add a credit card without receiving a text.

Re: Gitlab Support is no longer processing MFA resets for free users

#227

Earlier quoted context omitted.

Yeah, sure, set up a recovery process I don't need anywhere else in life and hope I never mess that up. Then have several thousand people (or far more if I'm lucky) rely on it, I'm sure that'll go well! I don't need recovery codes for anything in my professional nor personal life outside open source programming.

You don’t have any other MFAs you need to manage in your digital life? That seems ... odd. It seems like you’re deciding to make an issue of, well, how MFA is _supposed_ to work.

I have other MFAs, but they all have real-world recovery routes.

Re: Gitlab Support is no longer processing MFA resets for free users

#228

Exactly just use a password no one is trying to hack your stuff, and the biggest risk is you. So sick of services that constantly tell me to use MFA. No I don’t want to and if I thought the service was that important I would use it.

no... and im not even going to explain why

Is it cause you think China or some hacker gives a shit about you? Newsflash you are no one to most people. Your actions matter to no one but yourself and the people close to you.
Post reply on HN