Update: As of a few minutes ago, the change to Phabricator to enforce 2FA at Bugzilla login was deployed to production. The requirement for 2FA inside of Phabricator has been disabled.
To be clear, you will still need 2FA enabled in Bugzilla to log into Phabricator, but you will not need to enable a separate 2FA in Phabricator itself. Mark On Tuesday, 5 December 2017 13:21:55 UTC-5, Tom Schuster wrote: > There are also various Firefox extensions that can manage 2 factor accounts > for you. > > On Tue, Dec 5, 2017 at 3:10 PM, Byron Jones <g...@mozilla.com> wrote: > > > TOTP does not require a smartphone. > > > > there's software TOTP clients that can be run on your desktop, and i'm > > also seeing TOTP support baked into some password managers. that clearly > > isn't as secure as the second factor implemented on a second device, > > however desktop TOTP does provide better security than password-only > > authentication. > > > > if you care about security and shun smartphones there are also plenty of > > "one time password token" hardware devices that perform the same function. > > i have a yubikey for my 2fa needs, mostly because it's more convenient than > > reaching for my phone. > > > > > > -glob > > > > > > Masatoshi Kimura wrote: > > > >> I went to the 2FA preference on BMO. For me, the only authentication > >> option was TOTP that requires a smartphone. I do not have a smartphone > >> like Mark. > >> > >> How can I continue to contribute after we are forced to use Phabricator? > >> Mozilla no longer wants volunteer contributors? > >> > >> On 2017/11/30 3:05, Mark Côté wrote: > >> > >>> Right, I should have mentioned that. We are working right now on > >>> enforcing > >>> MFA for Phabricator via BMO. See > >>> https://bugzilla.mozilla.org/show_bug.cgi?id=1393950. Should go out next > >>> week. > >>> > >>> Mark > >>> > >>> On Nov 29, 2017 12:41 PM, "Andreas Tolfsen"<a...@sny.no> wrote: > >>> > >>> Also sprach Mark Côté: > >>>> > >>>> We were hesitant to advertise this too widely in order not to create > >>>>> any confusion around the Quantum release, but now that that has > >>>>> settled down I am told it should be fine for anyone to start using > >>>>> it. The instance is at https://phabricator.services.mozilla.com/ > >>>>> and there are docs at > >>>>> https://moz-conduit.readthedocs.io/en/latest/phabricator-user.html. > >>>>> > >>>> I’ve been wanting to try out the new review tool, but the sign up > >>>> steps in the documentation fails to mention two-factor authentication. > >>>> The only option is ‘Mobile Phone App (TOTP)’ and if you, like me, > >>>> don’t have a smartphone it is seemingly impossible to create an > >>>> account. > >>>> > >>>> I would’ve thought it would delegate the MFA bit to Bugzilla, or > >>>> am I doing something wrong? > >>>> > >>>> > >>>> _______________________________________________ > >>> dev-platform mailing list > >>> dev-platform@lists.mozilla.org > >>> https://lists.mozilla.org/listinfo/dev-platform > >>> > >>> > > -- > > glob — engineering productivity — moz://a > > > > > > _______________________________________________ > > dev-platform mailing list > > dev-platform@lists.mozilla.org > > https://lists.mozilla.org/listinfo/dev-platform > > _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
