Activity
From 2016-04-14 to 2016-05-13
2016-05-13
-
01:05 Feature #22: Store and manage multiple email addresses
- This feature request is still the most voted for. So far I've only done a little work, mostly theoretical, about how ...
2016-05-11
-
10:02 Feature #117: Two factor auth for https://panel.bitfolk.com/
- Thanks Andy.
-
- I've now put this live, including 2FA for SSH to Xen Shell. Please give it a bit more testing!
I've disabled 2FA f...
2016-05-10
-
- > When you successfully enter a valid token to confirm, is it worth highlighting the "Congratulations, …" text? When ...
2016-05-09
-
- Okay, I will make it keep track of the last successful token and not accept it again.
2016-05-07
-
15:25 Feature #117: Two factor auth for https://panel.bitfolk.com/
- I invalidated TOTP for UID 448 and then re-added to Google for iPhone using the latest barcode. Successfully added an...
-
11:04 Feature #117: Two factor auth for https://panel.bitfolk.com/
- Works for me adding a new 2FA key with Google Authenticator for iPhone.
When you successfully enter a valid token ... -
- I've tested that, works great for me (Google Authenticator on Android).
-
- Okay, so based on your feedback I've…
* Made it require the input of a valid token before 2FA is enabled for real
* ...
2016-05-06
-
- > I can also confirm that replacing the spaces with %20 made it work, and showing the CORRECT authentication OTP's.
... -
- > So I logged in to testpanel in Chrome, with TOTP enabled. I mistyped by OTP and got "Epic Fail". I typed the code i...
-
- I can confirm that removing the spaces made Google Authenticator on iPhone work.
I can also confirm that replacing... -
- So I logged in to testpanel in Chrome, with TOTP enabled. I mistyped by OTP and got "Epic Fail". I typed the code in ...
-
- admin wrote:
> There's a report that the key can't be added using Google Authenticator on iPhone 5s. The error messa... -
- robert wrote:
> admin wrote:
> > * being able to see the QR code, key and three valid tokens at any time from the s... -
- There's a report that the key can't be added using Google Authenticator on iPhone 5s. The error message is:
> The ...
2016-05-05
-
- heavy-lifting wrote:
> the TOTP feature on 1Password was news to me - it was easy to set up.
Thanks, good to know... -
09:24 Feature #117: Two factor auth for https://panel.bitfolk.com/
- I've just added 2FA and configured it using 1Password and it seems to work fine. Even without really known what I was...
-
- admin wrote:
> robert wrote:
> > I've just set up MFA on the test panel and it works perfectly!
>
> Good to hear... -
08:45 Feature #117: Two factor auth for https://panel.bitfolk.com/
- admin wrote:
> Ah good idea, so like, it asks you to put a token in and only enables 2FA if you get that right?
Y... -
- halleck wrote:
> I would suggest requiring that the user enters a valid TOTP code during the 2FA setup process.
A... -
- halleck wrote:
> ...logging in appear to succeed when it's supposed like, as well as failing when it's not supposed ... -
- robert wrote:
> I've just set up MFA on the test panel and it works perfectly!
Good to hear. Are you happy with h... -
- Ok, I have now done some quick testing at enabling 2FA at https://testpanel.bitfolk.com/, and it logging in appear to...
-
- I've just set up MFA on the test panel and it works perfectly!
-
- I've implemented TOTP 2FA on the panel test site and would appreciate some user testing of it to check it is fit for ...
-
- Is it actually justified to disable email password resets just because two-factor authentication is enabled?
If 2FA ...
2016-05-04
-
- We are also going to need to either use the same 2FA for SSH to Xen Shell, or else allow it to be made key-only. As i...
2016-05-03
-
- Definitely, I think it's fair to say that someone prepared to enable MFA is accepting responsibility for not losing t...
-
- I assume use of optional 2FA should be incompatible with any form of automated email password reset, yes?
-
- I see that both Google Public DNS and OpenDNS allow it:
* https://developers.google.com/speed/public-dns/cache
* ... -
- I just wanted to register my support for this. TOTP is now a widely deployed, mature technology and given that gaini...
-
- I agree that there are security implications from this request and on consideration don't see it as a particularly se...
-
- When you pay by Stripe you are asked to enter your name, email address and postal address - all information that BitF...
2016-04-18
-
- ssh-vulnkey doesn't exist in jessie and really ssh-keygen should be used there to validate key data, so I'll now rena...
-
- Okay, I've now added configuration that disables SSH public key validation so it's now possible to add keys that ssh-...
2016-04-17
-
- It's not currently possible to add ed25519 algorithm SSH public keys to the panel because the blacklisted/valid key c...
Also available in: Atom