Hmm, https://www.mediawiki.org/wiki/Phabricator/Help/Two-factor_Authentication_Resets ... offers a few options for verification but not sure if one of them works for you?

oh crap, I forgot to mention that I created the task via email so I have no
access to the web interface and I'm not logged in.

Do you maybe have SSH access to Toolforge etc and could upload a file, to verify this request? (Not sure if this makes sense, that's why I asked which way you think you could verify that you are you.)

How do I do that? I don't mess around with Toolforge or any other developer
tools like that.

I do have my SSH key setup, I just wanna know how to upload a file.

@Apap04: The basic question is: In which way do you think you could verify that you are who you state that you are?

For copying files, probably scp but that is out of scope for this task.

I could record a video of myself proving my identity. I'll have to email it
to you (aklapper) because of privacy issues.

@Apap04: Okay, but how does an "identity" (not sure what that is) directly verify that Apap04 is the mediawiki.org/Phab username of that person?

My real life identity. This is one way that I know of that I can verify
that I'm "Apap04".

@Apap04: Please explain where there is already information available about the "real life identity" of https://www.mediawiki.org/w/index.php?title=User:Apap04 , to compare with.

https://toolsadmin.wikimedia.org/tools/membership/status/629 was declined. It looks like we need to find some way for the ssh public key associated with https://wikitech.wikimedia.org/wiki/User:Apap04 which is currently linked to @Apap04 to be used to verify this request. To make that possible, I have added https://wikitech.wikimedia.org/wiki/User:Apap04 as a member of the 'bastion' project.

@Apap04, you should be able to use the ssh private key that corresponds to the public key associated with your account on Wikitech to login to bastion.wmflabs.org. Once you do that, create a text file named 2fa-reset-request.txt in your user's home directory containing the url of this task and then ping me back here to verify it. If you are on a unix like system, something like this should work:

$ ssh -i <path to your private key> apap04@bastion.wmflabs.org
$ echo "https://phabricator.wikimedia.org/T234233" > 2fa-reset-request.txt
$ exit

@bd808 Done.

In T234233#5549465, @Apap04 wrote:

@bd808 Done.

$ ssh bastion.wmflabs.org
$ ls -lh ~apap04/2fa-reset-request.txt
-rw-r--r-- 1 apap04 wikidev 56 Oct  5 21:19 /home/apap04/2fa-reset-request.txt
$ cat ~apap04/2fa-reset-request.txt
Hello, world! https://phabricator.wikimedia.org/T234233

@Aklapper, @mmodell, @greg, @thcipriani verification checks out for @Apap04 having control of linked Developer account. Can one of you take care of the Phabricator 2FA removal for them? (Requires a hat I have not collected.)

Thank you! :)