Maniphest T196370

2fa reset for MarkAHershberger
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Hexmode
	Jun 4 2018, 1:55 PM

Description

My phone got wet and doesn't work any more. I don't have any 2fa reset tokens.

I've created /home/mah/help.txt.asc in my home directory on bastion.wmflabs.org with the following content:

Event Timeline

Hexmode created this task.Jun 4 2018, 1:55 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 4 2018, 1:55 PM

which 2FA account is this (wiki, phab, something else?)

For the signed message, can you sign something referencing the date and the url of this ticket.

A google hangouts video chat with someone who knows you is also the standard way to identify someone in a situation like this.

wiki and phab.

Now at /home/mah/phab-ticket.txt.asc on bastion:

I'll try to get a google hangout going with @Tgr or @cicalese (I would try with you, but I don't have your id on hangouts -- mine is hexmode, if you or anyone else wants to confirm.)

Google's 2fa backup was an sms message.

Confirmed via video chat that @Hexmode is @Hexmode.

Does wiki mean Wikimedia SUL (Wikipedia etc.) or wikitech(/Horizon) or both?

Framawiki added a project: acl*security.Jun 4 2018, 5:34 PM

Framawiki subscribed.

both

Mentioned in SAL (#wikimedia-operations) [2018-06-04T17:44:46Z] <tgr> disabled SUL+wikitech 2FA for MarkAHershberger (T196370)

I have reset MarkAHershberger and MarkAHershberger. I don't have Phabricator access, someone else will have to do that.

aklapper@phab1001:~$ sudo /srv/phab/phabricator/bin/auth strip --all-types --user Hexmode
Usage Exception: There are no matching factors to strip.

There is no 2FA on that Phab account: https://phabricator.wikimedia.org/people/query/YzCImuDTp7Nc/#R

In T196370#4254652, @Aklapper wrote:

There is no 2FA on that Phab account: https://phabricator.wikimedia.org/people/query/YzCImuDTp7Nc/#R

None on the @Hexmode account, but there is on @MarkAHershberger https://phabricator.wikimedia.org/people/query/PPyc4nWg6y3C/#R

Ok, SUL is fixed. Wikitech is fixed. All that is left is phabricator.

Ah, sorry!

aklapper@phab1001:~$ sudo /srv/phab/phabricator/bin/auth strip --all-types --user MarkAHershberger
These auth factors will be stripped:
    MarkAHershberger	totp	Mobile Phone App (TOTP)
    Strip these authentication factors? [y/N] y
Stripping authentication factors...
Done.

Thank you!!

• Vvjjkkii renamed this task from 2fa reset for MarkAHershberger to lobaaaaaaa.Jul 1 2018, 1:06 AM

• Vvjjkkii reopened this task as Open.

• Vvjjkkii triaged this task as High priority.