BitFolk

2016-05-05

20:30 Bug #138 (New): 403 Forbidden when accessing invoice for sibling account

It is possible to pay an invoice for a "sibling" account without that being the active account, but when you finish p... robert

09:40 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

heavy-lifting wrote:
> the TOTP feature on 1Password was news to me - it was easy to set up.
Thanks, good to know... admin

09:24 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just added 2FA and configured it using 1Password and it seems to work fine. Even without really known what I was... heavy-lifting

08:51 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> robert wrote:
> > I've just set up MFA on the test panel and it works perfectly!
>
> Good to hear... robert

08:45 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> Ah good idea, so like, it asks you to put a token in and only enables 2FA if you get that right?
Y... halleck

08:38 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> I would suggest requiring that the user enters a valid TOTP code during the 2FA setup process.
A... admin

08:36 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> ...logging in appear to succeed when it's supposed like, as well as failing when it's not supposed ... halleck

08:35 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

robert wrote:
> I've just set up MFA on the test panel and it works perfectly!
Good to hear. Are you happy with h... admin

08:31 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Ok, I have now done some quick testing at enabling 2FA at https://testpanel.bitfolk.com/, and it logging in appear to... halleck

08:28 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just set up MFA on the test panel and it works perfectly! robert

08:14 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've implemented TOTP 2FA on the panel test site and would appreciate some user testing of it to check it is fit for ... admin

05:52 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Is it actually justified to disable email password resets just because two-factor authentication is enabled?
If 2FA ... admin

04:00 Web site Feature #137 (Closed): keys/ssh.txt should include SHA256 fingerprints

The SHA256 hashes have now been added. admin

03:29 Web site Feature #137: keys/ssh.txt should include SHA256 fingerprints

I found a convoluted shell command line to generate base64-encoded SHA256 hashes of the keys so here is a script to g... admin

03:26 Web site Feature #137 (Closed): keys/ssh.txt should include SHA256 fingerprints

Modern SSH clients display the server fingerprints using base64-encoded SHA256, but https://bitfolk.com/keys/ssh.txt ... admin

2016-05-04

16:45 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

We are also going to need to either use the same 2FA for SSH to Xen Shell, or else allow it to be made key-only. As i... admin

2016-05-03

18:27 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Definitely, I think it's fair to say that someone prepared to enable MFA is accepting responsibility for not losing t... robert

18:09 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I assume use of optional 2FA should be incompatible with any form of automated email password reset, yes? admin

18:05 Panel Feature #72: Tool for clearing DNS cache

I see that both Google Public DNS and OpenDNS allow it:
* https://developers.google.com/speed/public-dns/cache
* ... admin

18:04 Web site Feature #100: A revision history of the terms and conditions should be published

I think Git would be a great solution to this, London Hackspace use it for changes to their constitution and you coul... robert

17:57 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I just wanted to register my support for this. TOTP is now a widely deployed, mature technology and given that gaini... robert

17:44 Panel Feature #72: Tool for clearing DNS cache

I agree that there are security implications from this request and on consideration don't see it as a particularly se... robert

17:37 Panel Feature #136 (New): Prepopulate Stripe form with contact details

When you pay by Stripe you are asked to enter your name, email address and postal address - all information that BitF... robert

2016-04-26

05:34 Operating Systems Feature #135 (Resolved): Support Ubuntu 16.04 LTS in Xen Shell installer

First try at this seems to be working. admin

2016-04-24

15:26 Operating Systems Feature #135: Support Ubuntu 16.04 LTS in Xen Shell installer

I was hoping to have had this available about the same time as the release but other things come up. I hope to have i... admin

15:24 Operating Systems Feature #135 (Closed): Support Ubuntu 16.04 LTS in Xen Shell installer

Add an install option for Ubuntu 16.04 LTS in Xen Shell. It was officially released on 21 April 2016. admin

15:21 Operating Systems Feature #99 (Closed): Support Slackware in the net installer

Installing Slackware from the rescue VM still seems to be the best way. admin

15:20 Operating Systems Feature #90 (Closed): Investigate Gentoo net install

Installing Gentoo from the rescue VM still seems to be the best way. admin

15:19 Operating Systems Feature #74 (Rejected): Support OpenSUSE

Doesn't seem to be enough demand. Customers can always do an install from rescue VM. admin

15:19 Operating Systems Feature #27 (Closed): Support 64-bit operating systems

admin

15:18 Operating Systems Feature #27 (Resolved): Support 64-bit operating systems

64-bit is now the default at BitFolk. You can switch between 64- and 32-bit installers in the Xen Shell. admin

2016-04-18

00:53 Panel Feature #134: Transition from using ssh-vulnkey to using ssh-keygen to validate keys

ssh-vulnkey doesn't exist in jessie and really ssh-keygen should be used there to validate key data, so I'll now rena... admin

00:51 Panel Feature #134 (In Progress): Transition from using ssh-vulnkey to using ssh-keygen to validate keys

Okay, I've now added configuration that disables SSH public key validation so it's now possible to add keys that ssh-... admin

2016-04-17

12:39 Panel Feature #134 (In Progress): Transition from using ssh-vulnkey to using ssh-keygen to validate keys

It's not currently possible to add ed25519 algorithm SSH public keys to the panel because the blacklisted/valid key c... admin