Support

While the VPS Citizens Gaming runs on has plenty of storage space, we've been working towards implementing migrating to object storage. Since SC content is generally image and video heavy, this will give us the expandability as the community grows.

If you see any odd behavior around image content, this is why. Hopefully it will be a seamless migration.

Lemmy's initial implementation of 2FA is not that straightforward and users can easily lock themselves out of their accounts. Please be careful if you decide to enable 2FA.

I personally suggest avoiding 2FA for now until it's working more consistently. There are several feature requests to force 2FA code confirmation is working before it is enabled and those are a bare minimum before this feature is functional.

If your account is locked out due to 2FA issues, please email [email protected] and include 2FA Lockout in your email subject.

2FA Setup Process

DO NO LOG OUT AT ANY POINT DURING THIS PROCESS UNTIL AFTER YOU'VE VERIFIED THAT YOUR 2FA KEYS WORK VIA STEP #8!

1. Click your Username in the top right of the site and select Settings.

2. Scroll to the bottom of the page and check the Set up 2-factor authentication box.

3. You should see the following alert pop up at the bottom of the screen:

4. The page will not automatically refresh. You will need to refresh it manually.

5. After a page fresh, you will see a new button at the bottom of Settings:

6. Clicking on this link does nothing. You need to right-click and copy the link to get your OTP secret key. Your clipboard should now have a URL in it that looks like this: otpauth://totp/Citizens%20Gaming:Test?secret=THISWILLBEWHEREYOURSECRETKEYWILLBE&algorithm=SHA256&issuer=Citizens%20Gaming

7. Depending on the app you use, you'll either need to paste the entire URL, or just the secret key, into the manual setup fields of that app.

8. Open an incognito browser and attempt to log into your account. You should be prompted for your 2FA code during login. If it works, you're good to go.

9. If 2FA is not allowing you to log in, go back to your main browser window and disable 2FA via the Settings page. Wait for updates and try again in a few months.

2FA Apps That Should Work

Android

• Oracle Mobile Authenticator
• Auth0 Guardian
• Sophos Authenticator
• FreeOTP Authenticator
• Google Authenticator
• 1Password

iOS

• Oracle Mobile Authenticator
• IBM Verify
• Sophos Authenticator
• FreeOTP Authenticator

Apps that appear to not support SHA-256

• Microsoft Authenticator
• LastPass Authenticator
• Duo Mobile
• Authy
• 2FAS Auth

Last night, several Lemmy instances (including lemmy.world) were breached and defaced. More details can be found here: https://lemmy.ml/post/1901079

This breach only affected instances that had custom emoji configured. I hadn't gotten to setting those up yet here, so this instance should not be vulnerable.

A fix for this vulnerability has already been created (https://github.com/LemmyNet/lemmy-ui/pull/1897) and as soon as 0.18.2 is released I will upgrade to it here.

This post will help keep the community up to speed on platform updates as they get rolled out. Feel free to create individual discussions in the Support channel if you are facing any issues with a particular build.

Current Lemmy version: 0.18.3

Version Changelog:

• 0.18.1 - Initial installation version.

• 0.18.2 - Upgrade performed on 7/12/2023 without any issues.

• • 2FA appears to be working fine on 0.18.2. If you want to use it please read this post about it.

• 0.18.3 - Upgrade performed on 7/29/2023 without issues.

• 0.18.4 - Upgrade performed on 8/11/2023 without issues.