News for hackers. Stuff that matters.
Re:Requiring MFA on popular gem maintainers by __s on Tuesday August 16, 2022 @09:45AM (#32482629)
Services usually offer a tokens which should be saved somewhere in order to reset 2FA. I agree, requiring users to keep tokens for every service is painful (see how many people had trouble not losing their btc keys when btc wasn't particularly valuable)

I've only gotten a new phone once. Was android to android. I was able to transfer everything from the old phone to the new phone as part of setup process

Granted, yesterday I had some trouble: my phone service failed to process a payment, so they disabled my service. Meanwhile I couldn't go in & review my bank info because I needed 2FA in order to login.. To make matters worse, the bank told me I needed to call a number for Loss Prevention Services to reenable sending money out of my account, & made me run around a bit looking for pay phones (surprise, they were out of order) before they let me use their phone

Re:Requiring MFA on popular gem maintainers by Hendrikto on Tuesday August 16, 2022 @09:50AM (#32482700)
> Services usually offer a tokens

In my experience, ”rarely“ is more accurate than ”usually“.

Re:Requiring MFA on popular gem maintainers by seized on Tuesday August 16, 2022 @09:57AM (#32482794)
For SMS 2FA maybe, but I've gotten between one and ten codes for every service I've enabled proper TOTP 2FA on.
Re:Requiring MFA on popular gem maintainers by em-bee on Tuesday August 16, 2022 @11:06AM (#32483764)
what can you do now to prevent this from happening again?
Re:Requiring MFA on popular gem maintainers by __s on Wednesday August 17, 2022 @08:00AM (#32495106)
I've tried putting an extra 2 months of payments on my phone plan so that if a payment doesn't go through service won't expire. Hopefully the automatic payments continue so I don't have to think about it