[scummvm-devel] scummvm-devel Digest, Vol 55, Issue 4

Daniel (SupSuper) supsuper at gmail.com
Mon Mar 22 21:40:13 UTC 2021 

Also note you only need 2FA to use the Github site. You can still use Git
via alternative means like SSH.
For those using Git via HTTPS, you might need to reset any cached auth for
the 2FA takes effect, and make sure you have the latest Git.

Gustavo Grieco via scummvm-devel <scummvm-devel at lists.scummvm.org> escreveu
no dia domingo, 21/03/2021 à(s) 21:46:

> Hi,
>
> There is no need to use a phone line or a mobile app to use 2FA in Github.
> What you can do is:
>
> 1. Enable 2FA to use an "app".
> 2. Save the backup codes.
> 3. Ask for the secret value as code (instead of a QR)
> 4. Use your secret value X with oathtool (
> http://www.nongnu.org/oath-toolkit/index.html) like this: oathtool --totp
> -b X
> 5. Enter the resulting number and Github will validate it.
>
> That's it. Please keep your secret value safe somewhere and use it every
> time Github asks for it.
>
> Regards,
> Gustavo.
>
> El vie, 19 mar 2021 a las 19:05, M. Kiewitz via scummvm-devel (<
> scummvm-devel at lists.scummvm.org>) escribió:
>
>> Hello Eugene,
>>
>> I haven't commited anything in the last few years.
>>
>> I don't own a smartphone, not even a mobile phone.
>>
>> Just tried to set up 2FA, but github seems to be incapable to send SMS
>> to landlines (it works, I implemented it myself at work), it even seems
>> that github is a bit broken on Pale Moon, and even told me that my
>> browser was old, although Pale Moon is just a fork of Firefox and is
>> actually up-to-date.
>>
>>
>> Kind Regards
>>
>>   Martin
>>
>>
>> On 19/03/2021 21:45, scummvm-devel-request at lists.scummvm.org wrote:
>> > Send scummvm-devel mailing list submissions to
>> >       scummvm-devel at lists.scummvm.org
>> >
>> > To subscribe or unsubscribe via the World Wide Web, visit
>> >       https://lists.scummvm.org/listinfo/scummvm-devel
>> > or, via email, send a message with subject or body 'help' to
>> >       scummvm-devel-request at lists.scummvm.org
>> >
>> > You can reach the person managing the list at
>> >       scummvm-devel-owner at lists.scummvm.org
>> >
>> > When replying, please edit your Subject line so it is more specific
>> > than "Re: Contents of scummvm-devel digest..."
>> >
>> >
>> > Today's Topics:
>> >
>> >    1. Re: ATTN PORTERS: New Buildbot ahead (Eugene Sandulenko)
>> >    2. Two-factor authentication requirements for GitHub (Matan Bareket)
>> >    3. Re: Two-factor authentication requirements for GitHub
>> >       (Eugene Sandulenko)
>> >    4. Re: Two-factor authentication requirements for GitHub
>> >       (Arnaud Boutonn?)
>> >    5. Re: Two-factor authentication requirements for GitHub
>> >       (Marcus Comstedt)
>> >    6. Re: Two-factor authentication requirements for GitHub
>> >       (Eugene Sandulenko)
>> >
>> >
>> > ----------------------------------------------------------------------
>> >
>> > Message: 1
>> > Date: Fri, 19 Mar 2021 15:59:25 +0100
>> > From: Eugene Sandulenko <sev at scummvm.org>
>> > To: Philippe Valembois <lephilousophe at gmail.com>
>> > Cc: ScummVM List <scummvm-devel at lists.scummvm.org>
>> > Subject: Re: [scummvm-devel] ATTN PORTERS: New Buildbot ahead
>> > Message-ID:
>> >       <
>> CAJG28-a+9AXEdhQB9GgHwQi0BLntVs-1FavC_FPqF1u_eyGgmA at mail.gmail.com>
>> > Content-Type: text/plain; charset="utf-8"
>> >
>> > On Fri, 19 Mar 2021 at 13:20, Philippe Valembois via scummvm-devel <
>> > scummvm-devel at lists.scummvm.org> wrote:
>> >
>> >> Hi everyone,
>> >>
>> >> For the last year I spent most of my time on modernizing our current
>> >> Buildbot server.
>> >>
>> > Wow, Phil, An excellent work!
>> >
>> > My work is available on my Github account:
>> >> https://github.com/lephilousophe/dockerized-bb/
>> >> Obviously, I will migrate it to ScummVM organization when admins
>> decide to.
>> >
>> > Since it has been running for a long while, I do not see anything
>> > preventing us from switching to it like now.
>> >
>> > Also, it would be great to write a news post about it (I can give a
>> help if
>> > needed here, just ping me), and we could ask users to test the builds
>> too.
>> >
>> >
>> > Eugene
>> > -------------- next part --------------
>> > An HTML attachment was scrubbed...
>> > URL: <
>> http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/13b54983/attachment-0001.htm
>> >
>> >
>> > ------------------------------
>> >
>> > Message: 2
>> > Date: Fri, 19 Mar 2021 11:19:14 -0400
>> > From: Matan Bareket <mataniko at gmail.com>
>> > To: ScummVM List <scummvm-devel at lists.scummvm.org>
>> > Subject: [scummvm-devel] Two-factor authentication requirements for
>> >       GitHub
>> > Message-ID:
>> >       <CAJF4eF71_0F-3wm37c1Pb5NyUag36BBGhWqUcOWfT=
>> JjA1+z7Q at mail.gmail.com>
>> > Content-Type: text/plain; charset="utf-8"
>> >
>> > Hello team,
>> >
>> > Over the last few days, our team members have identified increased
>> phishing
>> > attempts on their GitHub accounts. If you get emails asking for you to
>> > reset your password, or anything that you haven't initiated, please
>> double
>> > check that you are not being phished.
>> >
>> > In order to reduce risk, we will turn on mandatory 2FA for organization
>> > members, next Friday, March 26th. Any team member without 2FA will be
>> > automatically removed from the org and will not be able to rejoin
>> without
>> > securing their GitHub account.
>> >
>> > If you have any questions or concerns please let me know either on
>> Discord
>> > or in this thread.
>> >
>> > -- Matan
>> > -------------- next part --------------
>> > An HTML attachment was scrubbed...
>> > URL: <
>> http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/d64109c7/attachment-0001.htm
>> >
>> >
>> > ------------------------------
>> >
>> > Message: 3
>> > Date: Fri, 19 Mar 2021 16:37:38 +0100
>> > From: Eugene Sandulenko <sev at scummvm.org>
>> > To: Matan Bareket <mataniko at gmail.com>
>> > Cc: ScummVM List <scummvm-devel at lists.scummvm.org>
>> > Subject: Re: [scummvm-devel] Two-factor authentication requirements
>> >       for GitHub
>> > Message-ID:
>> >       <
>> CAJG28-bC+_pz-scyDsxNr4YmvodUh1XhH2t8ZJzkWWiSW-jHfw at mail.gmail.com>
>> > Content-Type: text/plain; charset="utf-8"
>> >
>> > Also, I cleaned up the list of users having access:
>> >
>> >   1. People with 2FA disabled
>> >   2. Not committing in the last 3+ years
>> >
>> > If you were removed but would like to have yourself re-added, or if I
>> > accidentally removed an active dev, please let me know, it is 20 secs
>> deal
>> > to re-add.
>> >
>> >
>> > Eugene
>> >
>> > On Fri, 19 Mar 2021 at 16:19, Matan Bareket via scummvm-devel <
>> > scummvm-devel at lists.scummvm.org> wrote:
>> >
>> >> Hello team,
>> >>
>> >> Over the last few days, our team members have identified increased
>> >> phishing attempts on their GitHub accounts. If you get emails asking
>> for
>> >> you to reset your password, or anything that you haven't initiated,
>> please
>> >> double check that you are not being phished.
>> >>
>> >> In order to reduce risk, we will turn on mandatory 2FA for organization
>> >> members, next Friday, March 26th. Any team member without 2FA will be
>> >> automatically removed from the org and will not be able to rejoin
>> without
>> >> securing their GitHub account.
>> >>
>> >> If you have any questions or concerns please let me know either on
>> Discord
>> >> or in this thread.
>> >>
>> >> -- Matan
>> >>
>> >> _______________________________________________
>> >> scummvm-devel mailing list
>> >> scummvm-devel at lists.scummvm.org
>> >> https://lists.scummvm.org/listinfo/scummvm-devel
>> >>
>> > -------------- next part --------------
>> > An HTML attachment was scrubbed...
>> > URL: <
>> http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/faca7bd8/attachment-0001.htm
>> >
>> >
>> > ------------------------------
>> >
>> > Message: 4
>> > Date: Fri, 19 Mar 2021 16:51:38 +0100
>> > From: Arnaud Boutonn? <strangerke at scummvm.org>
>> > To: Eugene Sandulenko <sev at scummvm.org>
>> > Cc: Matan Bareket <mataniko at gmail.com>, ScummVM List
>> >       <scummvm-devel at lists.scummvm.org>
>> > Subject: Re: [scummvm-devel] Two-factor authentication requirements
>> >       for GitHub
>> > Message-ID:
>> >       <CABojxEukQXvLONAWay6S8V5b=
>> 9do+UY2P5nAtrSzCYe88PsLeA at mail.gmail.com>
>> > Content-Type: text/plain; charset="utf-8"
>> >
>> > Hi guys,
>> >
>> > If you wonder where this option is, check :
>> > https://github.com/settings/security
>> >
>> > Best regards,
>> > Arnaud
>> >
>> > On Fri, Mar 19, 2021 at 4:38 PM Eugene Sandulenko via scummvm-devel <
>> > scummvm-devel at lists.scummvm.org> wrote:
>> >
>> >> Also, I cleaned up the list of users having access:
>> >>
>> >>   1. People with 2FA disabled
>> >>   2. Not committing in the last 3+ years
>> >>
>> >> If you were removed but would like to have yourself re-added, or if I
>> >> accidentally removed an active dev, please let me know, it is 20 secs
>> deal
>> >> to re-add.
>> >>
>> >>
>> >> Eugene
>> >>
>> >> On Fri, 19 Mar 2021 at 16:19, Matan Bareket via scummvm-devel <
>> >> scummvm-devel at lists.scummvm.org> wrote:
>> >>
>> >>> Hello team,
>> >>>
>> >>> Over the last few days, our team members have identified increased
>> >>> phishing attempts on their GitHub accounts. If you get emails asking
>> for
>> >>> you to reset your password, or anything that you haven't initiated,
>> please
>> >>> double check that you are not being phished.
>> >>>
>> >>> In order to reduce risk, we will turn on mandatory 2FA for
>> organization
>> >>> members, next Friday, March 26th. Any team member without 2FA will be
>> >>> automatically removed from the org and will not be able to rejoin
>> without
>> >>> securing their GitHub account.
>> >>>
>> >>> If you have any questions or concerns please let me know either on
>> >>> Discord or in this thread.
>> >>>
>> >>> -- Matan
>> >>>
>> >>> _______________________________________________
>> >>> scummvm-devel mailing list
>> >>> scummvm-devel at lists.scummvm.org
>> >>> https://lists.scummvm.org/listinfo/scummvm-devel
>> >>>
>> >> _______________________________________________
>> >> scummvm-devel mailing list
>> >> scummvm-devel at lists.scummvm.org
>> >> https://lists.scummvm.org/listinfo/scummvm-devel
>> >>
>> > -------------- next part --------------
>> > An HTML attachment was scrubbed...
>> > URL: <
>> http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/5248c3f1/attachment-0001.htm
>> >
>> >
>> > ------------------------------
>> >
>> > Message: 5
>> > Date: Fri, 19 Mar 2021 19:11:36 +0100
>> > From: "Marcus Comstedt" <marcus at mc.pp.se>
>> > To: Matan Bareket <mataniko at gmail.com>
>> > Cc: ScummVM List <scummvm-devel at lists.scummvm.org>
>> > Subject: Re: [scummvm-devel] Two-factor authentication requirements
>> >       for GitHub
>> > Message-ID: <yf9ft0rui7b.fsf at mc.pp.se>
>> > Content-Type: text/plain; charset=us-ascii
>> >
>> >
>> > Hi,
>> >
>> > Matan Bareket via scummvm-devel <scummvm-devel at lists.scummvm.org>
>> > writes:
>> >
>> >> Over the last few days, our team members have identified increased
>> phishing
>> >> attempts on their GitHub accounts. If you get emails asking for you to
>> >> reset your password, or anything that you haven't initiated, please
>> double
>> >> check that you are not being phished.
>> >>
>> >> In order to reduce risk, we will turn on mandatory 2FA for organization
>> >> members, next Friday, March 26th. Any team member without 2FA will be
>> >> automatically removed from the org and will not be able to rejoin
>> without
>> >> securing their GitHub account.
>> > Ugh.  Ok, I created a new GitHub account "zeldin-of-two-factors" with
>> > 2FA enabled.  Please remove my regular account ("zeldin") from the org
>> > and add that one instead.
>> >
>> >
>> >   // Marcus
>> >
>> >
>> >
>> >
>> > ------------------------------
>> >
>> > Message: 6
>> > Date: Fri, 19 Mar 2021 21:45:27 +0100
>> > From: Eugene Sandulenko <sev at scummvm.org>
>> > To: Marcus Comstedt <marcus at mc.pp.se>
>> > Cc: Matan Bareket <mataniko at gmail.com>, ScummVM List
>> >       <scummvm-devel at lists.scummvm.org>
>> > Subject: Re: [scummvm-devel] Two-factor authentication requirements
>> >       for GitHub
>> > Message-ID:
>> >       <
>> CAJG28-bwb5KasPsRob5+VOwRkJbVztoMFW2VjhB_WSNwD3abyA at mail.gmail.com>
>> > Content-Type: text/plain; charset="utf-8"
>> >
>> > On Fri, 19 Mar 2021 at 19:11, Marcus Comstedt via scummvm-devel <
>> > scummvm-devel at lists.scummvm.org> wrote:
>> >
>> >> Ugh.  Ok, I created a new GitHub account "zeldin-of-two-factors" with
>> >> 2FA enabled.  Please remove my regular account ("zeldin") from the org
>> >> and add that one instead.
>> >>
>> > Done. Could you please describe in a couple of words, why do you prefer
>> to
>> > keep your existing account as is?
>> >
>> >
>> > Eugene
>> > -------------- next part --------------
>> > An HTML attachment was scrubbed...
>> > URL: <
>> http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210319/89f01bb8/attachment.htm
>> >
>> >
>> > ------------------------------
>> >
>> > Subject: Digest Footer
>> >
>> > _______________________________________________
>> > scummvm-devel mailing list
>> > scummvm-devel at lists.scummvm.org
>> > https://lists.scummvm.org/listinfo/scummvm-devel
>> >
>> >
>> > ------------------------------
>> >
>> > End of scummvm-devel Digest, Vol 55, Issue 4
>> > ********************************************
>> _______________________________________________
>> scummvm-devel mailing list
>> scummvm-devel at lists.scummvm.org
>> https://lists.scummvm.org/listinfo/scummvm-devel
>>
> _______________________________________________
> scummvm-devel mailing list
> scummvm-devel at lists.scummvm.org
> https://lists.scummvm.org/listinfo/scummvm-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20210322/8f13b558/attachment-0001.htm>

More information about the scummvm-devel mailing list