Gitlab now requires phone number/credit card verification

Looks like gitlab now requires account verification for new accounts in addition to email. Either phone number or credit card.

This applies both to accounts created with a working email or by logging in using your github account. You can’t even verify your email until you go through step 1.

I don’t know when this started, but at least for the last month or two judging from these posts in the forums.

Fun fact: I don’t even want to host on gitlab, I just wanted to report bugs in some projects. So I’m locked out.

kevincox,
@kevincox@lemmy.ml avatar

This really sucks for bug reporting. I don’t mind this at all for hosting as that cost notable resources (especially their free CI tier) and they can set their own terms, but I want people to be able to report bugs without any trouble. (Although if spam is an issue maybe projects could opt-in to requiring this verification to report bugs).

A work-around is maybe the service desk feature allowing reporting bugs via email but this has issues for proper collaboration:

  1. The reporter’s email is shared.
  2. The issue is private by default.
  3. Can’t collaborate on an existing issue.

Maybe I’ll just go back to mailing lists… Or GitHub has gotten better recently. But GitLab’s CI is so much better.

TauZero,

I want people to be able to report bugs without any trouble.

Thank you for being aware! I’ve experienced this on github.com. I’ve tried to submit issues several times to open source projects, complete with proposed code to solve a bug, but github shadowbans my account 6 hours after creating it (because I use a VPN? a third-party email provider? do not provide a phone number? who knows). I can see the issue and pull request when logged in, but they only see a 404 on their project page even if I give them a direct link. I ended up sending them a screenshot of the issue page just to convince them this was even possible. Sad to hear gitlab does it even worse now by making phone mandatory.

Bipta,

Kbin uses Gitlab so it's too bad.

ernest, (edited )
@ernest@kbin.social avatar

Not really. The official repository (with issue management) is located on Codeberg. GitHub serves as a mirror in case of any issues with the primary service.

https://codeberg.org/Kbin/kbin-core

roguetrick,

Well what would you know about it, ernest.

nix,
@nix@merv.news avatar

Hopefully the move to codeberg.org

peyotecosmico, (edited )

Time to start using GitDirectory named V.01 shared over FTP.

It’s a joke, don’t use FTP, it’s not secure.

intrepid,

Is there any reference for this? I can’t find anything relevant. Just curious.

peyotecosmico,

Of FTP not being secure? Check the links in the comments below

FTP it’s not encrypted

intrepid,

No. I mean gitdirectory over FTP.

peyotecosmico,

There’s no GitDirectory, it’s the way we used to share files back then, a shared directory over FTP

intrepid,

I’m aware of FTP. It’s still around in certain circles. But for a moment I thought that there was some sort of integration between ftp and git. I guess not.

lazynooblet,
@lazynooblet@lazysoci.al avatar

Why isn’t FTP secure

MrRazamataz,
@MrRazamataz@lemmy.razbot.xyz avatar

because it hasn’t got an S in it

Klaymore,
@Klaymore@sh.itjust.works avatar

It’s unencrypted, your ISP / Starbucks wifi can read all the files you send. Use SFTP instead.

Atemu,
@Atemu@lemmy.ml avatar

Not just read but modify even.

ErwinLottemann,

or FTPS

registrert,
@registrert@lemmy.sambands.net avatar

deleted_by_author

    •
    ErwinLottemann,

    SFTP is a ‘part’ of SSH, FTPS is FTP but encrypted.

    registrert,
    @registrert@lemmy.sambands.net avatar

    deleted_by_author

    •
    JackbyDev,

    Yeah, I think you need to go out of your way to try to use ftps. When people say ftp they generally mean SFTP.

    tabularasa,

    Yes, SFTP > FTP-S.

    xcjs,
    @xcjs@programming.dev avatar

    Especially when it comes to gateway configuration.

    privacybro,

    For alternatives, I recommend to use a community-ran Gitea instance. Project Segfault runs one.

    about.gitea.com

    git.projectsegfau.lt

    Also check out Forgejo, it’s another git software. Disroot has an instance.

    forgejo.org

    git.disroot.org

    intrepid,

    How many instances will one have to register on? This isn’t going to improve until forgefed is done.

    privacybro,

    explain further please?

    intrepid,

    You won’t be able to contribute to a project on any of those instances, unless you register on it. So if you are a prolific contributor, you might end up signing up on dozens of those instances.

    Forgefed is a federation protocol for such instances. It’s based on ActivityPub - the same that powers Lemmy and Mastodon. You can have just one account on a single instance and still be able to contribute to projects on multiple others. It’s still in the works though. It’s expected that at least gitlab, gitea and forgejo will support it.

    Fisch,
    @Fisch@lemmy.ml avatar

    Codeberg also uses Forgejo

    interdimensionalmeme,

    What’s the best way to circumvent phone number verification ? My burner YouTube account, which has nothing unsavory on it, has been marked for phone number verification or else I can’t login at all.

    Of course I’m not giving them my real phone number. What the best way to fake this?

    hottari,

    There are no ways to beat this. They want your real number. That’s the point.

    interdimensionalmeme,

    There had to way to defeat the pots system, it’s an antique, not a security system

    AtmaJnana, (edited )

    get a burner sim. pay cash.

    ChaoticNeutralCzech, (edited )

    Impossible in some countries, like Germany with mandatory ID validaion. Luckily, our Pirate Party leader, a telecommunications expert, blocked this proposal here.

    https://feddit.de/pictrs/image/04109612-6c86-4203-9153-643746ad3151.png

    interdimensionalmeme,

    But using the sim will identify location and IMEI. Anyway that’s quite expensive, like 10$ per account ? Ouch !

    Nugget,

    There are paid services that offer phone number masking such as Firefox Relay

    interdimensionalmeme,

    I tried VoIP addresses and got the message “we can’t use that number”. Is Firefox relay immune to that?

    Slotos,

    Sourcehut. The answer is sourcehut.

    You don’t even need an account to submit patches, just configure git send-email.

    intrepid,

    Some people seem to think that setting up send-email and mailing patches has too much of a learning curve and ‘barrier to entry’.

    fluffery,
    @fluffery@lemmy.ml avatar

    Forgejo?

    possiblylinux127,

    Codeberg looks interesting but it would be nice to see a US based version. Anyway I think its clear gitlab is problematic

    Fisch,
    @Fisch@lemmy.ml avatar

    Why does it matter where it’s based?

    possiblylinux127, (edited )

    Because I don’t want to use services that are across that ocean

    intrepid,

    Honestly, the servers not being in the US is a feature these days - even for US-based customers.

    possiblylinux127,

    Not really as you don’t have control over them whatsoever. I can’t vote in Europe

    Fisch,
    @Fisch@lemmy.ml avatar

    Why does that matter? It doesn’t make a difference

    possiblylinux127,

    I does though, with all of the sketchy laws around tech. The US isn’t great but at least I can vote here.

    manokox400,

    Looks like gitlab is pozzed now. (((They))) are at it again.

    LWD, (edited )

    deleted_by_author

    •
    ada,
    @ada@lemmy.blahaj.zone avatar

    The three brackets are a nazi dog whistle.

    Jordan_U,

    For anyone unfamiliar and wanting more background, and an explanation of why you may see Jewish people add ((( ))) around their own names on social media,

    en.m.wikipedia.org/wiki/Triple_parentheses

    (I agree 100% with the person I am replying to, and I’m sure they know all of this already)

    adamnejm, (edited )
    @adamnejm@programming.dev avatar

    Just tried this out using a typical temporary email address (temp-mail.org) and a VPN (AirVPN).
    I was only asked to confirm my e-mail address within 3 days, never for a phone address or any banking details.

    Judging by the first post you’ve linked to, it’s only necessary for paid accounts or free trials.
    The person in the second post is trying to register via GitHub / Google, well… sucks for them.

    rrobin,

    I’ve tried a few times in the past 2 weeks. Using a good email account and also with github, no luck though. Maybe its doing some “smart” heuristics to trigger it.

    I just retried now, using that temp mail (but no vpn) and got the exact same phone verification. Maybe my IP address is evil :D

    bamboo,

    I’d assume this will be a non issue once they implement ActivityPub. They can enable whatever account restrictions on their gitlab instance, but if I don’t want to provide this information to report a bug, then I can use another instance or self host my own, without the account restrictions.

    ipkpjersi,

    You really think they will add a full ActivityPub implementation? I highly doubt it.

    JackbyDev,

    For discussions probably. Not for repos.

    bamboo,

    From the Summary in the link:

    The end goal of this proposal is to build interoperability features into GitLab so that it’s possible on one instance of GitLab to open a merge request to a project hosted on an other instance, merging all willing instances in a global network

    AppearanceBoring9229,

    That’s great news!

    Sneptaur,
    @Sneptaur@pawb.social avatar

    I don’t even really see this as an issue now personally. I guess it’s the principle of the thing.

    cupcakezealot,
    @cupcakezealot@lemmy.blahaj.zone avatar

    sorry but deleting the account is absolutely ridiculous.

    mark it inactive but just deleting someone’s entire git history because they didn’t put in a phone number or credit card is so dumb.

    i don’t even need a phone number or credit card for my github account.

    Wilzax,

    Good thing it’s only deleting your account if it’s a new account that you didn’t finish the registration process for

    MooseBoys,

    deleting someone’s entire git history

    Based on the image text this is for new accounts only. My account has neither phone nor credit card and I’ve not been asked to re-verify. Maybe they’re having problems with bots at the moment.

    intrepid,

    Maybe they’re having problems with bots at the moment.

    I have to go through the ridiculous cloudfare verification page now. How do they have a bot issue?

    LiveLM,

    Probably people trying to mine Crypto on the CI runners again

    Fisch,
    @Fisch@lemmy.ml avatar

    I think this is for new accounts only, if you already have an account, your E-Mail will already be verified

    ndsvw,
    @ndsvw@feddit.de avatar

    Have only my “private” repos hosted there… Maybe, it’s time to host a git server locally…

    intrepid,

    Get one of those cheap thin-client or micro-ATK type desktop, install as a server and move your online services there. Too bad this isn’t that popular yet.

    wintermute,

    Glad I switched to Forgejo some time ago, never looked back : )

    nakal,
    @nakal@kbin.social avatar

    It looks like Gitea. Is it a fork?

    poVoq,
    @poVoq@slrpnk.net avatar

    Softfork. Basically the version that runs on Codeberg.org

    PropaGandalf, (edited )

    And soon with ActivityPub integration? Pls?

    poVoq,
    @poVoq@slrpnk.net avatar

    Work in progress, but it’s taking longer than I expected.

    intrepid,

    The forgefed spec itself is a work-in-progress. Not yet ready for a proper implementation.

    blindbunny,

    I was asking like less then a month ago what’s wrong with gitlab when Firefox switched to GitHub, now I know.

    vox, (edited )
    @vox@sopuli.xyz avatar
    1. firefox were using self-hosted mercurial + git with sync
    2. they just dropped mercurial, they’re still not on github
      only misc. libraries and the android frontend are on github, and firefox/mozilla has never used gitlab
    GrappleHat,
    @GrappleHat@lemmy.ml avatar

    Why GitLab!?

    tarneo,
    @tarneo@lemmy.ml avatar

    Because it’s a decent competitor to the GitHub monopoly. It also has a few unique features when compared to it. Just guessing why OP uses it though (many people do)

    GrappleHat,
    @GrappleHat@lemmy.ml avatar

    Sorry, I meant “GitLab, why’d you do that!?”

    (I’m a GitLab user myself)

    tarneo,
    @tarneo@lemmy.ml avatar

    Oh right

    DroneRights,

    Oh, well then you forgot your comma

    Clbull,

    Well they can just GitOut

    buzz,
    @buzz@lemmy.world avatar

    Better to train Microsoft ai?

    QuazarOmega,

    How about training HI on Codeberg? ;)

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • privacy@lemmy.ml
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 18878464 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10502144 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 38