@awight: See https://www.mediawiki.org/wiki/Phabricator/Help/Two-factor_Authentication_Resets for options.

I would still like this reset. I've posted a user committed identity hash in https://www.mediawiki.org/w/index.php?title=User:Adamw&diff=3485365&oldid=3299259&diffmode=source

Hmm, page says "Make sure that your user committed identity hash has been on your wiki user page for more than a month" but was added after creating this task, hence does not help to verify. Easiest might be if someone who knows you had a video call with you, or maybe a Phab admin in your office to verify this request.

In T236765#5838787, @Aklapper wrote:

Hmm, page says "Make sure that your user committed identity hash has been on your wiki user page for more than a month" but was added after creating this task, hence does not help to verify.

The committed identity in the link he provided was added more than 3 months ago on 29 October 2019

Correct, but after creating this task...

@awight you still have access to production systems (see https://github.com/wikimedia/puppet/blob/d86dc985594ee5fd20e8c73826b04513a7c206c7/modules/admin/data/data.yaml#L149) so I imagine writing a file there saying this is really you would suffice requesting in this ticket would be good enough.
Otherwise a call / hangout with you also might suffice (for people that know who you are)

In T236765#5838822, @Aklapper wrote:

Correct, but after creating this task...

Sorry I did not look at the task creation date because the description says 'urgent'. I think that should be corrected, something can't be urgent and stays unresolved for three month at the same time.

@Ammarpad: The task description says "This isn't urgent.".

Indeed. It seems I am not seeing clearly today. Sorry for the confusion.

In T236765#5838787, @Aklapper wrote:

Hmm, page says "Make sure that your user committed identity hash has been on your wiki user page for more than a month" but was added after creating this task, hence does not help to verify. Easiest might be if someone who knows you had a video call with you, or maybe a Phab admin in your office to verify this request.

This is something I don't want to push back on, I'm happy to have a video call... However, for the sake of future cases like mine, perhaps we should reconsider how the "more than a month" rule is interpreted? My understanding is that the month delay is to prevent an attacker from simultaneously compromising all of my accounts, and successfully taking over my Phabricator identity before I realize that anything happened. The month would give me time to recognize that I've been account-jacked, and dispute the attacker's claim to ownership. Why would it matter when the task is created, in this scenario? It makes much more sense if we're waiting a month between posting the committed identity hash on my user page, and performing the Phabricator 2FA reset, independent of date stamps on the task.

I have just talked to the real human Adam Wight in the office and can confirm that he created this Phabricator task and wants his token reset :)