[ruby-core:103388] [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[ruby-core:103388] [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[SHIBATA Hiroshi]

Hello,

A few days ago, I did upgrade bugs.ruby-lang.org to Redmine 4.2.
Redmine 4.2 provide the Multi-factor Authentication for protect the
user account.

I enabled it and change the default settings of MFA today.
So, the users need to setup it mandatory for protecting your account.

Regards,
-- 
SHIBATA Hiroshi hsbt@ruby-lang.org
https://www.hsbt.org/

[ruby-core:103414] Re: [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[Martin J. Dürst]

Is there a way to use this multi-factor authentication for (like me) 
people who don't have a smart phone?

Regards,   Martin.

On 2021-04-12 11:18, SHIBATA Hiroshi wrote:
> Hello,
> 
> A few days ago, I did upgrade bugs.ruby-lang.org to Redmine 4.2.
> Redmine 4.2 provide the Multi-factor Authentication for protect the
> user account.
> 
> I enabled it and change the default settings of MFA today.
> So, the users need to setup it mandatory for protecting your account.
> 
> Regards,
> 

[ruby-core:103415] Re: [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[SHIBATA Hiroshi]

You can use open-source implementation for chrome extension like
https://authenticator.cc/

But I didn't know that is useful because I didn't use it.

On Tue, Apr 13, 2021 at 5:26 PM Martin J. Dürst <duerst@it.aoyama.ac.jp> wrote:
>
> Is there a way to use this multi-factor authentication for (like me)
> people who don't have a smart phone?
>
> Regards,   Martin.
>
> On 2021-04-12 11:18, SHIBATA Hiroshi wrote:
> > Hello,
> >
> > A few days ago, I did upgrade bugs.ruby-lang.org to Redmine 4.2.
> > Redmine 4.2 provide the Multi-factor Authentication for protect the
> > user account.
> >
> > I enabled it and change the default settings of MFA today.
> > So, the users need to setup it mandatory for protecting your account.
> >
> > Regards,
> >



-- 
SHIBATA Hiroshi hsbt@ruby-lang.org
https://www.hsbt.org/

[ruby-core:103416] Re: [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[Ufuk Kayserilioglu]

[-- Attachment #1.1: Type: text/plain, Size: 1414 bytes --]

Or build your own CLI tool in Ruby, like me:
https://rubygems.org/gems/authentic

Note: I do not advise anyone to use that tool, it was just something I put
together for myself really quickly. However, it contains all the logic to
store and generate TOTP codes.

Best,
Ufuk

On Tue., Apr. 13, 2021, 12:07 SHIBATA Hiroshi, <hsbt@ruby-lang.org> wrote:

> You can use open-source implementation for chrome extension like
> https://authenticator.cc/
>
> But I didn't know that is useful because I didn't use it.
>
> On Tue, Apr 13, 2021 at 5:26 PM Martin J. Dürst <duerst@it.aoyama.ac.jp>
> wrote:
> >
> > Is there a way to use this multi-factor authentication for (like me)
> > people who don't have a smart phone?
> >
> > Regards,   Martin.
> >
> > On 2021-04-12 11:18, SHIBATA Hiroshi wrote:
> > > Hello,
> > >
> > > A few days ago, I did upgrade bugs.ruby-lang.org to Redmine 4.2.
> > > Redmine 4.2 provide the Multi-factor Authentication for protect the
> > > user account.
> > >
> > > I enabled it and change the default settings of MFA today.
> > > So, the users need to setup it mandatory for protecting your account.
> > >
> > > Regards,
> > >
>
>
>
> --
> SHIBATA Hiroshi hsbt@ruby-lang.org
> https://www.hsbt.org/
>
> Unsubscribe: <mailto:ruby-core-request@ruby-lang.org?subject=unsubscribe>
> <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>
>

[-- Attachment #1.2: Type: text/html, Size: 2617 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]

[ruby-core:105878] Re: [ANN] Multi-factor Authentication of bugs.ruby-lang.org

[Eric Wong]

SHIBATA Hiroshi <hsbt@ruby-lang.org> wrote:
> Hello,
> 
> A few days ago, I did upgrade bugs.ruby-lang.org to Redmine 4.2.
> Redmine 4.2 provide the Multi-factor Authentication for protect the
> user account.

(I missed this earlier since I don't use Ruby, much, nowadays)

I'm using w3m browser and I can't seem to get the plain text code
entered properly.  No JS/graphics, so I can't view the QR code img,
of course.

I write daemons and command-line tools.  Nothing I've ever done
in Ruby has ever required working graphics, so it's completely
unreasonable to expect Ruby contributors have working graphics.
Graphics stacks are extremely complex and fragile, so support
for old hardware often gets broken and too expensive to maintain.

> I enabled it and change the default settings of MFA today.
> So, the users need to setup it mandatory for protecting your account.

This is needless barrier to entry; AFAIK I've never had special
privileges to modify things in Redmine, even.   I might check out
https://rubygems.org/gems/authentic as mentioned elsewhere,
but I'd also have to review it and every dependency it uses
before using it...

Thanks.