AllBugsFeaturesChangelogSearchNew post
Sign in with Fluxer
Bugs

Changing Fluxertag softlocks during 2FA verification flow

(#215) Bug Awaiting confirmation profiles security
by RexSystem edited originally by @Inderix on GitHub

Summary

When attempting to change the FluxerTag of an account with Fluxer Plutonium and secured with a 2FA security key (such as a YubiKey, in my case), the application will send a 2FA request that will hang on the verification dialogue.

Steps to reproduce

  1. Establish a security key
  2. Attempt to change fluxertag, utilizing the key to confirm the change
  3. Observe bug

Environment (optional)

Tested and the bug appears both in Firefox on Linux and Vanadium on GrapheneOS.

Logs or screenshots (optional)

image
  • 551845130-fca81bae-6eed-461f-8db3-b3c798aadb85.png

    551845130-fca81bae-6eed-461f-8db3-b3c798aadb85.png

    1517×957 | 293 kB

3 comments

Sign in with Fluxer to comment and vote.
Comment by Rex
RexSystem 1 vote
Status changed from Fixed to Awaiting confirmation
This was closed in a bulk cleanup before Fluxer V2 without being checked or fixed. It may work now, so it is waiting for someone to confirm whether the bug still happens.
Permalink
Comment by @Jiralite
RexSystem 1 vote originally by @Jiralite on GitHub
I cannot reproduce this, may I ask what method you are using for your security key? Browser? 1Password? Etc.
Permalink
Comment by @Inderix
RexSystem 1 vote originally by @Inderix on GitHub OP
On both devices I'm using a Yubikey I attached to my account a little while after account creation. On firefox I am using the browser based authentication, the whole "insert and touch your security key" thing. I tested my setup against Yubico's WebAuthn playground as well, and had no issues.
Permalink