BitFolk

2016-05-20

19:08 Auth. DNS Feature #120: Allow multiple DNS master IPs, both v4 abd v6

It is now possible to have IPv6 addresses as DNS masters.
As I am rewriting the monitoring configuration at the mo... admin

2016-05-13

01:05 Panel Feature #22: Store and manage multiple email addresses

This feature request is still the most voted for. So far I've only done a little work, mostly theoretical, about how ... admin

2016-05-11

10:02 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Thanks Andy. robert

02:14 Panel Feature #117 (Feedback): Two factor auth for https://panel.bitfolk.com/

I've now put this live, including 2FA for SSH to Xen Shell. Please give it a bit more testing!
I've disabled 2FA f... admin

2016-05-10

16:44 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

> When you successfully enter a valid token to confirm, is it worth highlighting the "Congratulations, …" text? When ... admin

2016-05-09

10:41 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Okay, I will make it keep track of the last successful token and not accept it again. admin

2016-05-07

15:25 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I invalidated TOTP for UID 448 and then re-added to Google for iPhone using the latest barcode. Successfully added an... sarah-jane

11:04 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Works for me adding a new 2FA key with Google Authenticator for iPhone.
When you successfully enter a valid token ... ra

10:33 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've tested that, works great for me (Google Authenticator on Android). robert

09:02 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Okay, so based on your feedback I've…
* Made it require the input of a valid token before 2FA is enabled for real
* ... admin

2016-05-06

21:58 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

> I can also confirm that replacing the spaces with %20 made it work, and showing the CORRECT authentication OTP's.
... admin

21:56 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

> So I logged in to testpanel in Chrome, with TOTP enabled. I mistyped by OTP and got "Epic Fail". I typed the code i... admin

21:44 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I can confirm that removing the spaces made Google Authenticator on iPhone work.
I can also confirm that replacing... sarah-jane

21:36 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

So I logged in to testpanel in Chrome, with TOTP enabled. I mistyped by OTP and got "Epic Fail". I typed the code in ... sarah-jane

15:33 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> There's a report that the key can't be added using Google Authenticator on iPhone 5s. The error messa... admin

14:41 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

robert wrote:
> admin wrote:
> > * being able to see the QR code, key and three valid tokens at any time from the s... admin

02:55 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

There's a report that the key can't be added using Google Authenticator on iPhone 5s. The error message is:
> The ... admin

2016-05-05

20:30 Bug #138 (New): 403 Forbidden when accessing invoice for sibling account

It is possible to pay an invoice for a "sibling" account without that being the active account, but when you finish p... robert

09:40 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

heavy-lifting wrote:
> the TOTP feature on 1Password was news to me - it was easy to set up.
Thanks, good to know... admin

09:24 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just added 2FA and configured it using 1Password and it seems to work fine. Even without really known what I was... heavy-lifting

08:51 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> robert wrote:
> > I've just set up MFA on the test panel and it works perfectly!
>
> Good to hear... robert

08:45 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> Ah good idea, so like, it asks you to put a token in and only enables 2FA if you get that right?
Y... halleck

08:38 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> I would suggest requiring that the user enters a valid TOTP code during the 2FA setup process.
A... admin

08:36 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> ...logging in appear to succeed when it's supposed like, as well as failing when it's not supposed ... halleck

08:35 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

robert wrote:
> I've just set up MFA on the test panel and it works perfectly!
Good to hear. Are you happy with h... admin

08:31 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Ok, I have now done some quick testing at enabling 2FA at https://testpanel.bitfolk.com/, and it logging in appear to... halleck

08:28 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just set up MFA on the test panel and it works perfectly! robert

08:14 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I've implemented TOTP 2FA on the panel test site and would appreciate some user testing of it to check it is fit for ... admin

05:52 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Is it actually justified to disable email password resets just because two-factor authentication is enabled?
If 2FA ... admin

04:00 Web site Feature #137 (Closed): keys/ssh.txt should include SHA256 fingerprints

The SHA256 hashes have now been added. admin

03:29 Web site Feature #137: keys/ssh.txt should include SHA256 fingerprints

I found a convoluted shell command line to generate base64-encoded SHA256 hashes of the keys so here is a script to g... admin

03:26 Web site Feature #137 (Closed): keys/ssh.txt should include SHA256 fingerprints

Modern SSH clients display the server fingerprints using base64-encoded SHA256, but https://bitfolk.com/keys/ssh.txt ... admin

2016-05-04

16:45 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

We are also going to need to either use the same 2FA for SSH to Xen Shell, or else allow it to be made key-only. As i... admin

2016-05-03

18:27 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

Definitely, I think it's fair to say that someone prepared to enable MFA is accepting responsibility for not losing t... robert

18:09 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I assume use of optional 2FA should be incompatible with any form of automated email password reset, yes? admin

18:05 Panel Feature #72: Tool for clearing DNS cache

I see that both Google Public DNS and OpenDNS allow it:
* https://developers.google.com/speed/public-dns/cache
* ... admin

18:04 Web site Feature #100: A revision history of the terms and conditions should be published

I think Git would be a great solution to this, London Hackspace use it for changes to their constitution and you coul... robert

17:57 Panel Feature #117: Two factor auth for https://panel.bitfolk.com/

I just wanted to register my support for this. TOTP is now a widely deployed, mature technology and given that gaini... robert

17:44 Panel Feature #72: Tool for clearing DNS cache

I agree that there are security implications from this request and on consideration don't see it as a particularly se... robert

17:37 Panel Feature #136 (New): Prepopulate Stripe form with contact details

When you pay by Stripe you are asked to enter your name, email address and postal address - all information that BitF... robert

2016-04-26

05:34 Operating Systems Feature #135 (Resolved): Support Ubuntu 16.04 LTS in Xen Shell installer

First try at this seems to be working. admin