Il 23/06/24 20:54, Leigh Scott ha scritto:
>> I have deleted the  google authentication app form my phone intentionally, 
>> no backup.
>> Please remove the OTP form my fedora account!
> I refuse to use 2FA for my account!

Please stop. We've already understood that three emails ago.

If you want to have the 2FA removed from your account see 
https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/2-factor/#_administration

 > Admins need to verify the users identity before processing these 
requests.
 >
 > Including, but not limited to:
 >
 >     user sends gpg signed email with gpg key attached to their Fedora 
account
 >     user can ssh to fedorapeople.org with the ssh private key 
associated with a ssh public key associated with their Fedora account 
rover verification (in case of Red Hat employee).
 >     Video or in person meeting with admin who knows their identity on 
sight.

This kind of requests, sent to a public mailing list, are exactly the 
type of attack 2FA will prevent. You need to verify who you really are 
to have your token deleted.

Mattia

--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to