Maybe, depending on where you are in the world, you could make some kind of GDPR request to get access to your data, even if you don't recover your account?
Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
31–40 of 108 posts
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#32Is there a phone number associated with the account? How does GitHub want you to prove that you're you?
There is, but it's not a phone number I have access to anymore. I changed it to the said person's phone number before I surrendered so that this exact scenario did not happen. I trusted the wrong person.
Seems like you could present this evidence to the police for an identity theft charge against the "wrong person." Or you could threaten to do so, and perhaps regain your property.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#33Earlier quoted context omitted.
These (for good reason) draconian policies are the reason I am still hesitant to embrace 2FA. I understand the significant improvement in your security posture, and I would not want someone not-me to be able to reset my credentials. But the failure mode is just too catastrophic. You lose one thing and you are shit out of luck. We need something better. I don't know what it would be.
I for one would appreciate the option to put an ID on file ahead of time, at least for important stuff like this. I like digital-only accounts for play, but for work stuff with real-world consequence, I’d like to link it to a real-world identity system… Not unlike the signature cards banks used long ago, I guess. Sure, maybe somebody motivated could defraud the government into issuing them a replacement ID in my name…
> I for one would appreciate the option to put an ID on file ahead of time, at least for important stuff like this.
I'm at that point of agreement. I don't want to say "national SSO ID" because that can get really Orwellian obviously. Being able to put an ID on file is a reasonable ask.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#34I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have my items stolen, there's a weather disaster etc. I try to make my hobby repos public and/or backed up in multiple places as a hedge.
Don't you have a 2FA Recovery Code?
Far too many of the critical services (banks) still only offer SMS 2FA.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#35> I can't, however, provide any 2FA codes or backup codes because they are printed on paper that has, I assume, been destroyed. The situation you are in is very unfortunate and I am sympathetic but in GitHub's defence, this is exactly what I hope would happen when I enable 2FA. I would be very perturbed to find out that GitHub would grant access to my account given identity documents. There are some creative solution…
The person should be able to walk in the service provider's office and get an in-person help, restoration of access, by presenting ID docs.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#36Is there a phone number associated with the account? How does GitHub want you to prove that you're you?
There is, but it's not a phone number I have access to anymore. I changed it to the said person's phone number before I surrendered so that this exact scenario did not happen. I trusted the wrong person.
> I trusted the wrong person.
This hits me hard. So you went to prison, and the person you trusted the most... turned out not to be trustworthy. Please hang in there and hope you meet (or have met already?) people you can rely on!
I'm very grateful for the many people in my life I can absolutely rely on.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#37[flagged]
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#38thief changed your github password? why? how did he get get access to your github account ?
Not a thief - someone they trusted.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#39Earlier quoted context omitted.
These (for good reason) draconian policies are the reason I am still hesitant to embrace 2FA. I understand the significant improvement in your security posture, and I would not want someone not-me to be able to reset my credentials. But the failure mode is just too catastrophic. You lose one thing and you are shit out of luck. We need something better. I don't know what it would be.
I for one would appreciate the option to put an ID on file ahead of time, at least for important stuff like this. I like digital-only accounts for play, but for work stuff with real-world consequence, I’d like to link it to a real-world identity system… Not unlike the signature cards banks used long ago, I guess. Sure, maybe somebody motivated could defraud the government into issuing them a replacement ID in my name…
That's how you turn 2fa into single factor authentication ( The ID ).
GitHub is such a large attack vector for the whole planet, that I understand their stance.
GitHub support a "recovery code" more secure than government ID. Print it out, store on USB, store on QR, etc, and stick it in at least one secure safe.
Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?
#40Do you personally know the person who stole all of your items and accounts?
I understand if you can't get or won't get in contact with them, but I'm curious as to whether this was a random or someone taking advantage of you.
Edit: Nevermind, I saw your response to someone else.