Lemmy.ca's Main Community

3053 readers

2 users here now

Welcome to the lemmy.ca/c/main community!

All new users on lemmy.ca are automatically subscribed to this community, so this is the place to read announcements, make suggestions, and chat about the goings-on of lemmy.ca.

For support requests specific to lemmy.ca, you can use [email protected].

founded 4 years ago

MODERATORS

104

UI updated to 0.18.2-rc1 (self.main)

submitted 2 years ago by Shadow to c/main

29 comments fedilink hide all child comments

Heads up that we've bumped the UI up to 0.18.2-rc.1, which should resolve the current exploit that was seen on lemmy.world.

We've also logged out all currently logged in users as part of it, so you'll need to login again.

you are viewing a single comment's thread
view the rest of the comments

[–] mp3 6 points 2 years ago* (last edited 2 years ago) (1 children)

The link starts with otpauth://, which will likely do nothing on desktop. Either click on it from a mobile device, or on desktop you can use an addon like Offline QR Code Generator (Firefox), then right-click the link and select QR code from link. This will show a QR code you'll be able to enroll in any TOTP app. Hopefully they'll add an option to display a QR code when using the desktop interface in newer versions of Lemmy.

[–] [email protected] 2 points 2 years ago (2 children)

Can I copy the link it generates and put it directly into my app that handles 2FA? (1password). Thought about trying it, but I didn’t see any recovery codes and am not keen on getting locked out.

[–] durablenapkin 8 points 2 years ago* (last edited 2 years ago) (1 children)

This worked for me in Bitwarden: note since Lemmy 2FA uses SHA256 you have to copy/paste the entire link and not just the secret token. If you copy/paste just the secret token most password managers with TOTP generation have it defaulted to SHA1.

[–] [email protected] 3 points 2 years ago

Good shit. Appreciate ya.

[–] grte 1 points 2 years ago

Worth noting that turning on 2FA doesn't log you out of your current session so you have the opportunity to turn it back off again if you can't copy it over in this way.