Page MenuHomePhabricator
Create Task
Maniphest T89605

Remove the two-factor authentication code for Negative24 account
Closed, ResolvedPublic
Actions

Description

I made a mistake and reset my phone without thinking about resetting TOTP codes and now I won't be able to remove the previous one and add another authenticator. Could I get those stripped off my account? If you need further authentication then I can post a message to one of my talk pages (from one of the accounts linked to this one). Documentation can be found here. Sorry that I have to bother you for something I did. Thanks.

Related Objects

Event Timeline

Maniphest changed the visibility from "Public (No Login Required)" to "Custom Policy".Feb 15 2015, 4:42 PM
Maniphest changed the edit policy from "All Users" to "Custom Policy".
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 15 2015, 4:42 PM
Negative24 created this task.Feb 15 2015, 4:42 PM
Negative24 triaged this task as Medium priority.
Negative24 updated the task description. (Show Details)
Negative24 added a project: WMF-NDA.
Negative24 changed Security from None to Other confidential issue.
Negative24 edited subscribers, added: Negative24; removed: Aklapper.
Negative24 updated the task description. (Show Details)Feb 16 2015, 7:26 PM
Negative24 removed a project: WMF-NDA.
Negative24 changed Security from Other confidential issue to None.
Negative24 added a subscriber: Aklapper.
Aklapper added a project: Phabricator.Feb 17 2015, 10:04 AM

In general we do not advertise using this functionality.

Please paste your committed identity (SHA) on your user page. Afterwards, please follow the steps in T87495#1028549.

Aklapper renamed this task from Strip TOTP codes for Negative24 to Remove the two-factor authentication code for Negative24 account.Feb 17 2015, 10:05 AM
Aklapper changed the visibility from "Custom Policy" to "Public (No Login Required)".
Aklapper changed the edit policy from "Custom Policy" to "All Users".

[made this task public as there is nothing secret]

Aklapper lowered the priority of this task from Medium to Low.Feb 17 2015, 10:07 AM
Aklapper mentioned this in T85706: Determine policy for Phabricator multi-factor authentication reset requests.Feb 17 2015, 11:43 AM
Negative24 added a comment.Feb 17 2015, 1:58 PM
In T89605#1043133, @Aklapper wrote:

In general we do not advertise using this functionality.

Please paste your committed identity (SHA) on your user page. Afterwards, please follow the steps in T87495#1028549.

UCI is already on most of my user pages. You can see it here on MediaWiki and on Wikipedia. You can see the secret key on P301. Again thanks for doing this. I'll make sure it doesn't happen again.

Negative24 added a comment.Feb 18 2015, 1:48 AM

I've been logged/locked out so I'll have to reply by email until this is
resolved.

Negative24 added a comment.Feb 22 2015, 4:52 PM

@Aklapper Can this be done soon?

Aklapper assigned this task to • chasemp.Feb 22 2015, 6:47 PM
Aklapper added a subscriber: • chasemp.

User-committed identity was added on-wiki in May 2014 and I'm confirming that "echo -n P301 | sha512sum" provides the user-committed identity so this can be reset.

As I don't have server acess, leaving the actual reset to @chasemp...

• chasemp closed this task as Resolved.Feb 23 2015, 6:48 PM
In T89605#1057744, @Aklapper wrote:

User-committed identity was added on-wiki in May 2014 and I'm confirming that "echo -n P301 | sha512sum" provides the user-committed identity so this can be reset.

As I don't have server acess, leaving the actual reset to @chasemp...

done per request

Negative24 added a comment.Feb 23 2015, 6:53 PM

@Aklapper @chasemp Thanks for the help!

Negative24 added a comment.Feb 24 2015, 4:59 PM

UCI V1 is now invalid for use by Negative24. UCI V2 public key (SHA-512) is "3f371127e95a35680e04d4b4efad878f5282a2b6c608e8e6c416fa5fecb65397d84e1f45faa8b2513eddb83c14669a1ff7e99c315653a0a171f3b07e5ac2efca".

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits