Talk:Phabricator/Help

About this board

Ask any questions about the Wikimedia Phabricator installation here.

babel problem in lmo wiktionary unsolved since almost a year ago

3
Gat lombard (talkcontribs)
AKlapper (WMF) (talkcontribs)
Gat lombard (talkcontribs)

I got it, it's may not be a priority issue

Reply to "babel problem in lmo wiktionary unsolved since almost a year ago"

bad page link : Cloud services instance

2
Wladek92 (talkcontribs)
197.207.141.224 (talkcontribs)

This appears because Arcanist is missing or corrupted on this instance.

Reply to "bad page link : Cloud services instance"

Adding a custom skin on Miraheze wiki

4
77.57.24.175 (talkcontribs)

Hello! We have our wiki on Miraheze hosting and I wonder how difficult it is to apply our custom skin there. As I understand we need to request to add our custom skin to the list, right? How long will take to have it online? And if we do updates of the skin will we need to trequest every time the update?

Thank you!

AKlapper (WMF) (talkcontribs)

Hi, this is Wikimedia Phabricator. I don't know which "the list" you have in mind, and we don't take anything online which is not Wikimedia Phabricator. I think you are in the wrong place and I wonder what made you ask here? :)

77.57.24.175 (talkcontribs)

Oh, I see, I ended up here somehow from Miraheze site :)

197.207.141.224 (talkcontribs)

You have to use their own instance and see their help pages.

Reply to "Adding a custom skin on Miraheze wiki"

Where to ask a question about a Phabricator project?

3
VeniVidiVicipedia (talkcontribs)

I have a question related to this project

Where can I best go with this question?

Is this in phabricator? or somewhere else?

AKlapper (WMF) (talkcontribs)
VeniVidiVicipedia (talkcontribs)

Thank you, I will send her an email

Reply to "Where to ask a question about a Phabricator project?"

Two-factor authentication removal

4
Summary by AKlapper (WMF)

Off-topic as this is not about Phabricator

Violetbonmua (talkcontribs)

I bought a new phone and I cannot use the code provided by 2FA app on my new phone to log-in.

Before that, I reset my old phone and now I cannot use the code provided by 2FA app on my old phone either.

My one-time scratch codes don't work somehow.

I'm using the computer at home, the only device that "stay logged in" to post this task.

Please give me advice and help.

Thank you and regards,

AKlapper (WMF) (talkcontribs)
AKlapper (WMF) (talkcontribs)

Hi, Phabricator does not offer one-time scratch codes so something is not correct about this request. Could you clarify what this is about please?

Violetbonmua (talkcontribs)

It is resolved by Trust & Safety. Thanks a lot.

Reason for disabled account

4
Summary by ~aanzx

resolved by Aklapper

~aanzxbot (talkcontribs)
AKlapper (WMF) (talkcontribs)
~aanzx (talkcontribs)

Ok, I won't be using that account anyway, earlier I had lost my account access so I had created phab account temporarily, by the way is it possible to request deletion of that account since there is no contribution from that account

AKlapper (WMF) (talkcontribs)
CBogen (WMF) (talkcontribs)

Hi, I seem to have lost access to my phabricator account. It's asking me to give it a MFA code from my mobile phone app in order to log in, but I don't have any configured for Phab (and it doesn't accept my OKTA or Google MFA code).  This page says an administrator can help me sort this out - @AKlapper (WMF) can you help? Thanks!

SNowick (WMF) (talkcontribs)

Hi - I am having the same issue, login is also not accepting my OKTA or Google MFA code. Requesting a reset as well. Thank you!

AKlapper (WMF) (talkcontribs)

Hi, neither Okta nor Google have ever been involved with Phabricator multi-factor authentication.

2FA codes for the two Phabricator accounts got set up a long time ago according to phab:T318929. I'm not sure what's the best way to verify here; see also T306708.

AKlapper (WMF) (talkcontribs)

@CBogen (WMF), @SNowick (WMF) Maybe a quick video call for verification makes most sense? Feel free to set up one or two (I'm in Central Europe) - thanks! (And sorry, need to be pretty strict with 2FA resets...)

Reply to "Need MFA reset"
Patafisik (WMF) (talkcontribs)

Hi, I created a task to report a bug by mistake, it was already solved and I see it very quickly. Is it possible to delete it? More in general, is it possible or not to delete tasks? If yes, how? Thank you

AKlapper (WMF) (talkcontribs)
Reply to "How to delete a task?"

requesting files deletion

2
Summary by ~aanzx

Done by AKlapper (WMF) , Thanks

~aanzx (talkcontribs)
AKlapper (WMF) (talkcontribs)

Done

2FA Reset for phabricator account

14
Summary by ~aanzx

Done by AKlapper (WMF) phab:T318172

~aanzx (talkcontribs)

@AKlapper (WMF) can reset my 2fa for phabricator account https://phabricator.wikimedia.org/p/Anoop/ , i have added ci at https://en.wikipedia.org/wiki/User:~aanzx , if it's possible for 2FA reset i can mail you text

AKlapper (WMF) (talkcontribs)
~aanzx (talkcontribs)

Ok i will wait 1 month , thanks for responding

AKlapper (WMF) (talkcontribs)

That will not solve the problem. Creating a CI should happen at least a month before losing 2FA access.

~aanzx (talkcontribs)

Ok, is it possible to remove my Wikimedia account from that account, so that I can create a new phabricator account, since I don't have any other option to recover account

AKlapper (WMF) (talkcontribs)

How to have some second verification factor which allows someone else to know that you are in control of your Phabricator and your MediaWiki account? How to prove that you are you? That is what 2FA is for...if you have any ideas, please share them.

~aanzx (talkcontribs)
AKlapper (WMF) (talkcontribs)

I don't really see how that is related to 2FA... what if an attacker has also taken over your email address? As you have an LDAP account attached, maybe uploading a file into your home directory might be an option? But I could not verify this.

"This is the problem with multi-factor authentication. It's nearly worthless if we allow easy resets and completely inconvenient if we don't."

~aanzx (talkcontribs)

@AKlapper (WMF) , i suggested email verification because , when i uninstalled my authenticator app 2FA on my wikimedia user account through email confirmation, most of other 2FA reset are done through email verifcation or scratch/recovery code only, wouldn't it be more feasible to add additional ways to recover account.


Phabricator does not offers backup codes for multi-factor authentication. If you lose access to your second-factor device, you must have put your user committed identity hash on your wiki user page at least one month before requesting a multi-factor authentication reset.

On Phabricator/Help/Two-factor Authentication Resets it doesn't mention Creating a CI should happen at least a month before losing 2FA access

~aanzx (talkcontribs)
AKlapper (WMF) (talkcontribs)

See my previous comment: What if an attacker has also taken over your email address? How to verify?

Of course it would be great to have additional ways to recover an account, I'd love someone to implement that in upstream Phabricator code. See also Phabricator/Help/Two-factor Authentication Resets for other options, e.g. if a third person comes to your mind for manual verification. See also my comment about LDAP above - do you have shell access to Toolforge to upload a file there, maybe?

(The page does mention, as your paste above comes from that page.)

I'd love to help but I don't know how. Again: "This is the problem with multi-factor authentication. It's nearly worthless if we allow easy resets and completely inconvenient if we don't."

~aanzx (talkcontribs)

unfortunately, since i have uninstalled my 2fa app without backing up code , i have lost access to all my 2fa codes for wikitech account also , i don't if anyone would to confirm i am the same person as requesting user , i had met THasan (WMF) sometime ago on a editathon would if that user confirms is it enough for 2fa reset

~aanzx (talkcontribs)

Or only other way is to create new accounts.

AKlapper (WMF) (talkcontribs)