How to lose access of our your servers on DigitalOcean

#1

Post by migueltarga » Fri, Aug 19, 2022, 8:23 PM UTC

I have an account on DigitalOcean for long time and I was using Github Login as the method of authentication.

For the past 7 years I had my company email as my primary email, and my personal email as secondary.

August 18, 2022 1:56:22 PM PDT I removed my primary email account because we had a merge in our company, and now we use different emails.

Now I can't get access to my DigitalOcean account, because for some reason they don't use the GitHub identifier but the email address. ( Also I lost access of my company email )

Im trying to get access to my account for the last 20 hours, they requested a picture of my ID, and of me holding my ID.

They have everything to change the primary email to the one I requested, but the support team don't understand the problem...

So Be careful using GitHub as your DigitalOcean authentication method!

Someone had a similar issue in 2020: https://twitter.com/salzian_dev/status/1293975538990813187

Re: How to lose access of our your servers on DigitalOcean

#2

Post by stop50 » Fri, Aug 19, 2022, 8:39 PM UTC

Why did you have an account of your workplace as the first address in the first place. i never trust my employer with more personal data than nesserary. He is in control of the address and can do what he wants with it.

Re: How to lose access of our your servers on DigitalOcean

#3

Post by migueltarga » Fri, Aug 19, 2022, 9:04 PM UTC

stop50 wrote: post #2

Why did you have an account of your workplace as the first address in the first place. i never trust my employer with more personal data than nesserary. He is in control of the address and can do what he wants with it.

Not possible to gain access with 2 factor authentication. I used as my primary email to receive email notifications

Re: How to lose access of our your servers on DigitalOcean

#4

Post by reidjs » Fri, Aug 19, 2022, 9:09 PM UTC

Losing your email isn't DigitalOcean's fault and the fact that they are actively working on getting you access back should prevent you from naming and shaming them.

Re: How to lose access of our your servers on DigitalOcean

#5

Post by synthmeat » Fri, Aug 19, 2022, 9:11 PM UTC

reidjs wrote: post #4

Losing your email isn't DigitalOcean's fault and the fact that they are actively working on getting you access back should prevent you from naming and shaming them.

Yeah. I'm not 100% even sure what is this "GitHub" part of, but I'd be thankful anyone is helping me in any way to recover my account.

Re: How to lose access of our your servers on DigitalOcean

#6

Post by spicybright » Fri, Aug 19, 2022, 9:15 PM UTC

At least you've learned a good lesson here.

If you want ownership of an account, you need ownership of the email you use. And do a hard separation between personal and work services.

Also, it sucks the hoops you're going through, but it's good they resist common social engineering tactics like they are. Good on them.

Maybe suck up to a sys admin to re-instate the email for a day if support goes nowhere.

Re: How to lose access of our your servers on DigitalOcean

#7

Post by synthmeat » Fri, Aug 19, 2022, 9:16 PM UTC

spicybright wrote: post #6

At least you've learned a good lesson here. If you want ownership of an account, you need ownership of the email you use. And do a hard separation between personal and work services. Also, it sucks the hoops you're going through, but it's good they resist common social engineering tactics like they are. Good on them. Maybe suck up to a sys admin to re-instate the email for a day if support goes nowhere.

Also, if they're not keeping old domain (thus being able to create any (new or old) email account), they're doing a really bad job at sysadmining.

Re: How to lose access of our your servers on DigitalOcean

#8

Post by migueltarga » Fri, Aug 19, 2022, 9:16 PM UTC

reidjs wrote: post #4

Losing your email isn't DigitalOcean's fault and the fact that they are actively working on getting you access back should prevent you from naming and shaming them.

I love Digital Ocean, don't get me wrong. Im just sharing the Bad experience with the "Social Authentication" flow and how long it is taking to solve a simple problem.

This also a heads up for anyone using GitHub as the authentication method.

Re: How to lose access of our your servers on DigitalOcean

#9

Post by spicybright » Fri, Aug 19, 2022, 9:17 PM UTC

migueltarga wrote: post #3

stop50 wrote: post #2

Why did you have an account of your workplace as the first address in the first place. i never trust my employer with more personal data than nesserary. He is in control of the address and can do what he wants with it.

Not possible to gain access with 2 factor authentication. I used as my primary email to receive email notifications

That's extremely weird you can't use the same address for notifications and 2FA

But if that's the case, you shouldn't tie personal accounts to work stuff like this in the first place. Just make a second email address.

Sure it's convenient but then you dig yourself holes like this.

Re: How to lose access of our your servers on DigitalOcean

#10

Post by alexklarjr » Fri, Aug 19, 2022, 9:18 PM UTC

That is why I cancelled my do account snd switched to normal vps hosting. They give you login and password and never enforce broken 2fa and sso schemes that lead you to lose access and to give phone, photo of id, enter email pins when your ip changed and other “very secure” crap.