196

17203 readers

1764 users here now

Be sure to follow the rule before you head out.

Rule: You must post before you leave.

Other rules

Behavior rules:

No bigotry (transphobia, racism, etc…)
No genocide denial
No support for authoritarian behaviour (incl. Tankies)
No namecalling
Accounts from lemmygrad.ml, threads.net, or hexbear.net are held to higher standards
Other things seen as cleary bad

Posting rules:

No AI generated content (DALL-E etc…)
No advertisements
No gore / violence
Mutual aid posts require verification from the mods first

NSFW: NSFW content is permitted but it must be tagged and have content warnings. Anything that doesn't adhere to this will be removed. Content warnings should be added like: [penis], [explicit description of sex]. Non-sexualized breasts of any gender are not considered inappropriate and therefore do not need to be blurred/tagged.

If you have any questions, feel free to contact us on our matrix channel or email.

Other 196's:

founded 2 years ago

MODERATORS

I may be about to lose my current Lemmy account :( (Don't trust Cisco Duo 2FA app) (lemmy.sdf.org)

submitted 5 months ago by [email protected] to c/[email protected]

25 comments fedilink hide all child comments

My phone with 2FA codes has died... again... for the 3rd time in something over 2 years (average Poco X3 Pro experience).

I've used the Cisco Duo app, mainly for the convenience of automatic backups. After all, this has saved me the last time my main phone died. Connect GDrive, download DB, enter passphrase to decrypt, there you go.

I've turned on my still barely functioning 2017 Moto G5s Plus. There I had the Duo app. Upon opening it says something along the lines of "Device offline, showing on-device accounts only."
How does that read to you? Auto-sync, I thought.
I connected to the internet, refreshed the app, nothing. I go to settings, check the backup... horror!
"Last backup: October 6th 12:06"
I opened the app at 12:06.

Why would you update the backup if it has more recent timestamp than current version?
"Hmm... this phone last backed up in 2023, most recent backup on cloud is 2024, yep, OVERWRITE IT WITH 2023 VERSION!!"

Hmm... this also means I've lost access to my Cisco NetAcad school account...

Welp, lesson learned, switching to Aegis.

Since disabling TOTP requires TOTP token, I have no way to disable it. I hope the instance admin can, but SDF has far more important shit to care about.

I am thinking on getting something crazy like Ulefone Armor 24 brick. Though it lacks things like 5G, stereo speakers, and 4K video recording, but I can afford it and have it shipped tomorrow morning.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 20 points 5 months ago (1 children)

Pro tip: if you have nextcloud you can set aegis to backup to a folder synced to the cloud, giving you automatic cloud backups. It can keep multiple copies too to prevent a situation like that happening.

But yeah, sorry that happened, hope you find another way to access those accounts.

[–] [email protected] 2 points 5 months ago

I do this, but with keepass (keepass on all devices and then sync with nextcloud). Saved my butt a few times, I can go into the file history and pull an old version of the keepass db out of it, and then keepass has a merge feature, so I can pull the old file out, and merge with current to find missing records.

Anyway... backups good.