<div dir="ltr">Hi,<div><br></div><div>There is no need to use a phone line or a mobile app to use 2FA in Github. What you can do is:</div><div><br></div><div>1. Enable 2FA to use an "app".</div><div>2. Save the backup codes.</div><div>3. Ask for the secret value as code (instead of a QR)</div><div>4. Use your secret value X with oathtool (<a href="http://www.nongnu.org/oath-toolkit/index.html">http://www.nongnu.org/oath-toolkit/index.html</a>) like this: oathtool --totp -b X</div><div>5. Enter the resulting number and Github will validate it.</div><div><br></div><div>That's it. Please keep your secret value safe somewhere and use it every time Github asks for it.</div><div><br></div><div>Regards,</div><div>Gustavo.</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El vie, 19 mar 2021 a las 19:05, M. Kiewitz via scummvm-devel (<<a href="mailto:scummvm-devel@lists.scummvm.org">scummvm-devel@lists.scummvm.org</a>>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Eugene,<br>
<br>
I haven't commited anything in the last few years.<br>
<br>
I don't own a smartphone, not even a mobile phone.<br>
<br>
Just tried to set up 2FA, but github seems to be incapable to send SMS<br>
to landlines (it works, I implemented it myself at work), it even seems<br>
that github is a bit broken on Pale Moon, and even told me that my<br>
browser was old, although Pale Moon is just a fork of Firefox and is<br>
actually up-to-date.<br>
<br>
<br>
Kind Regards<br>
<br>
Martin<br>
<br>
<br>
On 19/03/2021 21:45, <a href="mailto:scummvm-devel-request@lists.scummvm.org" target="_blank">scummvm-devel-request@lists.scummvm.org</a> wrote:<br>
> Send scummvm-devel mailing list submissions to<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
><br>
> To subscribe or unsubscribe via the World Wide Web, visit<br>
> <a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
> or, via email, send a message with subject or body 'help' to<br>
> <a href="mailto:scummvm-devel-request@lists.scummvm.org" target="_blank">scummvm-devel-request@lists.scummvm.org</a><br>
><br>
> You can reach the person managing the list at<br>
> <a href="mailto:scummvm-devel-owner@lists.scummvm.org" target="_blank">scummvm-devel-owner@lists.scummvm.org</a><br>
><br>
> When replying, please edit your Subject line so it is more specific<br>
> than "Re: Contents of scummvm-devel digest..."<br>
><br>
><br>
> Today's Topics:<br>
><br>
> 1. Re: ATTN PORTERS: New Buildbot ahead (Eugene Sandulenko)<br>
> 2. Two-factor authentication requirements for GitHub (Matan Bareket)<br>
> 3. Re: Two-factor authentication requirements for GitHub<br>
> (Eugene Sandulenko)<br>
> 4. Re: Two-factor authentication requirements for GitHub<br>
> (Arnaud Boutonn?)<br>
> 5. Re: Two-factor authentication requirements for GitHub<br>
> (Marcus Comstedt)<br>
> 6. Re: Two-factor authentication requirements for GitHub<br>
> (Eugene Sandulenko)<br>
><br>
><br>
> ----------------------------------------------------------------------<br>
><br>
> Message: 1<br>
> Date: Fri, 19 Mar 2021 15:59:25 +0100<br>
> From: Eugene Sandulenko <<a href="mailto:sev@scummvm.org" target="_blank">sev@scummvm.org</a>><br>
> To: Philippe Valembois <<a href="mailto:lephilousophe@gmail.com" target="_blank">lephilousophe@gmail.com</a>><br>
> Cc: ScummVM List <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: Re: [scummvm-devel] ATTN PORTERS: New Buildbot ahead<br>
> Message-ID:<br>
> <<a href="mailto:CAJG28-a%2B9AXEdhQB9GgHwQi0BLntVs-1FavC_FPqF1u_eyGgmA@mail.gmail.com" target="_blank">CAJG28-a+9AXEdhQB9GgHwQi0BLntVs-1FavC_FPqF1u_eyGgmA@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> On Fri, 19 Mar 2021 at 13:20, Philippe Valembois via scummvm-devel <<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>> wrote:<br>
><br>
>> Hi everyone,<br>
>><br>
>> For the last year I spent most of my time on modernizing our current<br>
>> Buildbot server.<br>
>><br>
> Wow, Phil, An excellent work!<br>
><br>
> My work is available on my Github account:<br>
>> <a href="https://github.com/lephilousophe/dockerized-bb/" rel="noreferrer" target="_blank">https://github.com/lephilousophe/dockerized-bb/</a><br>
>> Obviously, I will migrate it to ScummVM organization when admins decide to.<br>
><br>
> Since it has been running for a long while, I do not see anything<br>
> preventing us from switching to it like now.<br>
><br>
> Also, it would be great to write a news post about it (I can give a help if<br>
> needed here, just ping me), and we could ask users to test the builds too.<br>
><br>
><br>
> Eugene<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<a href="http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/13b54983/attachment-0001.htm" rel="noreferrer" target="_blank">http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/13b54983/attachment-0001.htm</a>><br>
><br>
> ------------------------------<br>
><br>
> Message: 2<br>
> Date: Fri, 19 Mar 2021 11:19:14 -0400<br>
> From: Matan Bareket <<a href="mailto:mataniko@gmail.com" target="_blank">mataniko@gmail.com</a>><br>
> To: ScummVM List <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: [scummvm-devel] Two-factor authentication requirements for<br>
> GitHub<br>
> Message-ID:<br>
> <CAJF4eF71_0F-3wm37c1Pb5NyUag36BBGhWqUcOWfT=<a href="mailto:JjA1%2Bz7Q@mail.gmail.com" target="_blank">JjA1+z7Q@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> Hello team,<br>
><br>
> Over the last few days, our team members have identified increased phishing<br>
> attempts on their GitHub accounts. If you get emails asking for you to<br>
> reset your password, or anything that you haven't initiated, please double<br>
> check that you are not being phished.<br>
><br>
> In order to reduce risk, we will turn on mandatory 2FA for organization<br>
> members, next Friday, March 26th. Any team member without 2FA will be<br>
> automatically removed from the org and will not be able to rejoin without<br>
> securing their GitHub account.<br>
><br>
> If you have any questions or concerns please let me know either on Discord<br>
> or in this thread.<br>
><br>
> -- Matan<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<a href="http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/d64109c7/attachment-0001.htm" rel="noreferrer" target="_blank">http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/d64109c7/attachment-0001.htm</a>><br>
><br>
> ------------------------------<br>
><br>
> Message: 3<br>
> Date: Fri, 19 Mar 2021 16:37:38 +0100<br>
> From: Eugene Sandulenko <<a href="mailto:sev@scummvm.org" target="_blank">sev@scummvm.org</a>><br>
> To: Matan Bareket <<a href="mailto:mataniko@gmail.com" target="_blank">mataniko@gmail.com</a>><br>
> Cc: ScummVM List <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: Re: [scummvm-devel] Two-factor authentication requirements<br>
> for GitHub<br>
> Message-ID:<br>
> <<a href="mailto:CAJG28-bC%2B_pz-scyDsxNr4YmvodUh1XhH2t8ZJzkWWiSW-jHfw@mail.gmail.com" target="_blank">CAJG28-bC+_pz-scyDsxNr4YmvodUh1XhH2t8ZJzkWWiSW-jHfw@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> Also, I cleaned up the list of users having access:<br>
><br>
> 1. People with 2FA disabled<br>
> 2. Not committing in the last 3+ years<br>
><br>
> If you were removed but would like to have yourself re-added, or if I<br>
> accidentally removed an active dev, please let me know, it is 20 secs deal<br>
> to re-add.<br>
><br>
><br>
> Eugene<br>
><br>
> On Fri, 19 Mar 2021 at 16:19, Matan Bareket via scummvm-devel <<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>> wrote:<br>
><br>
>> Hello team,<br>
>><br>
>> Over the last few days, our team members have identified increased<br>
>> phishing attempts on their GitHub accounts. If you get emails asking for<br>
>> you to reset your password, or anything that you haven't initiated, please<br>
>> double check that you are not being phished.<br>
>><br>
>> In order to reduce risk, we will turn on mandatory 2FA for organization<br>
>> members, next Friday, March 26th. Any team member without 2FA will be<br>
>> automatically removed from the org and will not be able to rejoin without<br>
>> securing their GitHub account.<br>
>><br>
>> If you have any questions or concerns please let me know either on Discord<br>
>> or in this thread.<br>
>><br>
>> -- Matan<br>
>><br>
>> _______________________________________________<br>
>> scummvm-devel mailing list<br>
>> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
>> <a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
>><br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<a href="http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/faca7bd8/attachment-0001.htm" rel="noreferrer" target="_blank">http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/faca7bd8/attachment-0001.htm</a>><br>
><br>
> ------------------------------<br>
><br>
> Message: 4<br>
> Date: Fri, 19 Mar 2021 16:51:38 +0100<br>
> From: Arnaud Boutonn? <<a href="mailto:strangerke@scummvm.org" target="_blank">strangerke@scummvm.org</a>><br>
> To: Eugene Sandulenko <<a href="mailto:sev@scummvm.org" target="_blank">sev@scummvm.org</a>><br>
> Cc: Matan Bareket <<a href="mailto:mataniko@gmail.com" target="_blank">mataniko@gmail.com</a>>, ScummVM List<br>
> <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: Re: [scummvm-devel] Two-factor authentication requirements<br>
> for GitHub<br>
> Message-ID:<br>
> <CABojxEukQXvLONAWay6S8V5b=<a href="mailto:9do%2BUY2P5nAtrSzCYe88PsLeA@mail.gmail.com" target="_blank">9do+UY2P5nAtrSzCYe88PsLeA@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> Hi guys,<br>
><br>
> If you wonder where this option is, check :<br>
> <a href="https://github.com/settings/security" rel="noreferrer" target="_blank">https://github.com/settings/security</a><br>
><br>
> Best regards,<br>
> Arnaud<br>
><br>
> On Fri, Mar 19, 2021 at 4:38 PM Eugene Sandulenko via scummvm-devel <<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>> wrote:<br>
><br>
>> Also, I cleaned up the list of users having access:<br>
>><br>
>> 1. People with 2FA disabled<br>
>> 2. Not committing in the last 3+ years<br>
>><br>
>> If you were removed but would like to have yourself re-added, or if I<br>
>> accidentally removed an active dev, please let me know, it is 20 secs deal<br>
>> to re-add.<br>
>><br>
>><br>
>> Eugene<br>
>><br>
>> On Fri, 19 Mar 2021 at 16:19, Matan Bareket via scummvm-devel <<br>
>> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>> wrote:<br>
>><br>
>>> Hello team,<br>
>>><br>
>>> Over the last few days, our team members have identified increased<br>
>>> phishing attempts on their GitHub accounts. If you get emails asking for<br>
>>> you to reset your password, or anything that you haven't initiated, please<br>
>>> double check that you are not being phished.<br>
>>><br>
>>> In order to reduce risk, we will turn on mandatory 2FA for organization<br>
>>> members, next Friday, March 26th. Any team member without 2FA will be<br>
>>> automatically removed from the org and will not be able to rejoin without<br>
>>> securing their GitHub account.<br>
>>><br>
>>> If you have any questions or concerns please let me know either on<br>
>>> Discord or in this thread.<br>
>>><br>
>>> -- Matan<br>
>>><br>
>>> _______________________________________________<br>
>>> scummvm-devel mailing list<br>
>>> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
>>> <a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
>>><br>
>> _______________________________________________<br>
>> scummvm-devel mailing list<br>
>> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
>> <a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
>><br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<a href="http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/5248c3f1/attachment-0001.htm" rel="noreferrer" target="_blank">http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/5248c3f1/attachment-0001.htm</a>><br>
><br>
> ------------------------------<br>
><br>
> Message: 5<br>
> Date: Fri, 19 Mar 2021 19:11:36 +0100<br>
> From: "Marcus Comstedt" <<a href="mailto:marcus@mc.pp.se" target="_blank">marcus@mc.pp.se</a>><br>
> To: Matan Bareket <<a href="mailto:mataniko@gmail.com" target="_blank">mataniko@gmail.com</a>><br>
> Cc: ScummVM List <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: Re: [scummvm-devel] Two-factor authentication requirements<br>
> for GitHub<br>
> Message-ID: <<a href="mailto:yf9ft0rui7b.fsf@mc.pp.se" target="_blank">yf9ft0rui7b.fsf@mc.pp.se</a>><br>
> Content-Type: text/plain; charset=us-ascii<br>
><br>
><br>
> Hi,<br>
><br>
> Matan Bareket via scummvm-devel <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> writes:<br>
><br>
>> Over the last few days, our team members have identified increased phishing<br>
>> attempts on their GitHub accounts. If you get emails asking for you to<br>
>> reset your password, or anything that you haven't initiated, please double<br>
>> check that you are not being phished.<br>
>><br>
>> In order to reduce risk, we will turn on mandatory 2FA for organization<br>
>> members, next Friday, March 26th. Any team member without 2FA will be<br>
>> automatically removed from the org and will not be able to rejoin without<br>
>> securing their GitHub account.<br>
> Ugh. Ok, I created a new GitHub account "zeldin-of-two-factors" with<br>
> 2FA enabled. Please remove my regular account ("zeldin") from the org<br>
> and add that one instead.<br>
><br>
><br>
> // Marcus<br>
><br>
><br>
><br>
><br>
> ------------------------------<br>
><br>
> Message: 6<br>
> Date: Fri, 19 Mar 2021 21:45:27 +0100<br>
> From: Eugene Sandulenko <<a href="mailto:sev@scummvm.org" target="_blank">sev@scummvm.org</a>><br>
> To: Marcus Comstedt <<a href="mailto:marcus@mc.pp.se" target="_blank">marcus@mc.pp.se</a>><br>
> Cc: Matan Bareket <<a href="mailto:mataniko@gmail.com" target="_blank">mataniko@gmail.com</a>>, ScummVM List<br>
> <<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>><br>
> Subject: Re: [scummvm-devel] Two-factor authentication requirements<br>
> for GitHub<br>
> Message-ID:<br>
> <<a href="mailto:CAJG28-bwb5KasPsRob5%2BVOwRkJbVztoMFW2VjhB_WSNwD3abyA@mail.gmail.com" target="_blank">CAJG28-bwb5KasPsRob5+VOwRkJbVztoMFW2VjhB_WSNwD3abyA@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> On Fri, 19 Mar 2021 at 19:11, Marcus Comstedt via scummvm-devel <<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a>> wrote:<br>
><br>
>> Ugh. Ok, I created a new GitHub account "zeldin-of-two-factors" with<br>
>> 2FA enabled. Please remove my regular account ("zeldin") from the org<br>
>> and add that one instead.<br>
>><br>
> Done. Could you please describe in a couple of words, why do you prefer to<br>
> keep your existing account as is?<br>
><br>
><br>
> Eugene<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<a href="http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/89f01bb8/attachment.htm" rel="noreferrer" target="_blank">http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/89f01bb8/attachment.htm</a>><br>
><br>
> ------------------------------<br>
><br>
> Subject: Digest Footer<br>
><br>
> _______________________________________________<br>
> scummvm-devel mailing list<br>
> <a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
> <a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
><br>
><br>
> ------------------------------<br>
><br>
> End of scummvm-devel Digest, Vol 55, Issue 4<br>
> ********************************************<br>
_______________________________________________<br>
scummvm-devel mailing list<br>
<a href="mailto:scummvm-devel@lists.scummvm.org" target="_blank">scummvm-devel@lists.scummvm.org</a><br>
<a href="https://lists.scummvm.org/listinfo/scummvm-devel" rel="noreferrer" target="_blank">https://lists.scummvm.org/listinfo/scummvm-devel</a><br>
</blockquote></div></div></div>