We'll be upgrading / fixing our 2FA by the end of the weekend.



Trash is the easiest place to secretly learn things about people. One persons trash is another persons treasure.

archaeology is largely modern people sifting through trash. sort of weird when you think about it.
 
archaeology is largely modern people sifting through trash. sort of weird when you think about it.

So I watch a lot of documentaries, usually historical. I was watching one a couple of nights ago, I think it was about the Saxons? It was really odd to see how excited the archeologists were about finding 3,000 year old human feces.
 
archaeology is largely modern people sifting through trash. sort of weird when you think about it.

So I watch a lot of documentaries, usually historical. I was watching one a couple of nights ago, I think it was about the Saxons? It was really odd to see how excited the archeologists were about finding 3,000 year old human feces.
 
There were about 8 or 9 distinctive round turds on a plate. They just looked too happy as they passed it around looking at it with loving wonder and amazement.
 
So I watch a lot of documentaries, usually historical.

I assume you've already watched the Time Team series (and its reboot)? that series is my favorite when it comes to archeology. long running too, i think they had 20 seasons.
 
Seriously, folks - this is a Site Announcement.

It is not up for debate.

It is not a support thread.

It is not for having a chat.

You have been notified of the impending changes, so that you can take any action you need to take (if any) that is appropriate to your circumstances. That is a courtesy, and is proactive.

Please pull your heads in and can the chatter.

TIA

Chris Turner
wizardfromoz

BTW Thanks Rob.
 
The best password these days is a passphrase .. like "phone dirt radio"
For all those who have been unsure about what form a passphrase takes?........there it is, from someone who knows.

Like a password.....make your own.....two or three words or more, that MEAN SOMETHING TO YOU ....six words or more is ideal.

I believe you can use more words if it suits you to do that....eg to complete a sentence or a phrase that is used a great deal,

boy burning deck
(the above means something to me....it is a joke told to me approx 62 years ago. I have never forgotten the opening sentence.....it simply needs 3 more words with it to be really secure/uncrackable)

Need an idea?....you have many accounts which require a password, and you dont wish to use the same phrase over and over ...?

use the same phrase, but put a number at the end of the phrase.....different number for each account...or a letter or a pair of letters indicating to you which account it is.....eg for Linux.org, you would have your five or six words, followed by LO

 
Last edited:
This has been updated! You can now enter new passkeys (if you choose to use them) on your security page.
I just tested by adding two yubikeys i have.
Thanks @Rob!
 
  • Like
Reactions: Rob
I logged out and log-in again without need for 2FA.
Could that be because of cookies?

Will old 2FA authenticator codes (not backup keys) work when I'm asked?
IDK what means "resident" vs "non-resident" keys.
 
I logged out and log-in again without need for 2FA.
Could that be because of cookies?

I allow this site to keep cookies on my PHONE. I got logged out.

Will old 2FA authenticator codes (not backup keys) work when I'm asked?
I used my app to generate a code

IDK what means "resident" vs "non-resident" keys.
Neither do I.

I haven't been on either of my computers yet. I'll let you know if there is any difference.
 
Here's a quick rundown of resident vs non-resident credentials from chatgpt:

Resident Passkeys (also called discoverable credentials) are stored directly on your security key or device. They allow for passwordless login, meaning you don’t even need to type your username — just tap your key and you’re in. The device remembers which site it’s for and which user it belongs to.


Non-Resident Passkeys (or non-discoverable credentials) don’t store anything on the key itself. Instead, the site has to ask the key to prove your identity after you enter your username. These are typically used as a second factor (2FA), not for passwordless login.
 
this upgrade will remove the non-resident keys and allow you to create new 'resident' keys.
Non-Resident Passkeys (or non-discoverable credentials) don’t store anything on the key itself. Instead, the site has to ask the key to prove your identity after you enter your username. These are typically used as a second factor (2FA), not for passwordless login.
Thank for explanation.
I've just logged out again, cleared all site data and was able to login fine with previously set 2FA key from authenticator which belongs to non-resident definition.

While all works fine it's confusing because you said upgrade will remove non-resident keys which doesn't seem to be true because I didn't have to re-set 2FA.
 
  • Like
Reactions: Rob
While all works fine it's confusing because you said upgrade will remove non-resident keys which doesn't seem to be true because I didn't have to re-set 2FA.
Sorry, it removed non-resident passkeys.. for people that use hardware keys like yubikey. I could have explained that better :)
 
Microsoft Auhenticator App working. (don't aask)
 
Last edited:
  • Like
Reactions: Rob


Members online


Top