Безопасность 1.2.0.3

[axtona]

спасибо доброму участнику @jessyподан новый ресурс: Security-Поддержка WebAuthn / FIDO2 безопасных ключей

Функции
[][suport fürWebAuthn / FIDO2 Sicherheitstastenдва шаговое аутентификационное подтверждение (например, физические устройства такие как YubiKeys требуют их использование крупными технологическими компаниями таких как Google для обеспечения безопасности их аккаунтов).

• []Поддержка нескольких ключей для каждого пользователя

[][Вариант дляДни до доверия двухфакторной проверкиТеперь вы можете настроить его по своему усмотрению, вместо того чтобы он был привязан к шаблону 30 дней в XenForo.[]*[Пользователи могутуправлять/viewить…

Read more about this resource...

 

[axtona]

thanks to dear member @roothacker updated [DigitalPoint] Security with a new update entry:

[DigitalPoint] Security

• Update for PHP 8.1
• Enforce requirement that server has OpenSSL PHP extension installed

Read the rest of this update entry...

 

[axtona]

thanks to dear member @roothacker updated [DigitalPoint] Security with a new update entry:

[DigitalPoint] Security

There are no functional changes, just phrasing. If you override the default 30 days to trust a TFA device, the phrase presented to the user when they are choosing to trust their device is fixed to show the right number of days.

Read the rest of this update entry...

 

[axtona]

thanks to dear member @roothacker updated [DigitalPoint] Security with a new update entry:

[DigitalPoint] Security

No functional changes, just the removal of Font Awesome Duotone icon usage

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security with a new update entry:

1.0.2.2

This is purely a cosmetic change that reworks how XenForo presents two-step verification options to users.

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security & Passkeys with a new update entry:

changelog

This is purely a semantic update that renames security key to Passkey for user-facing verbiage.

Passkey is the new term that's going to be used by Apple, Google and Microsoft going forward for what used to be known as security keys or WebAuthn/FIDO2.

The term is also being adopted by Yubikey for their hardware keys.

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security & Passkeys with a new update entry:

1.1.1

• If user has no Passkeys setup yet, the button to manage them is labeled 'Enable' rather than 'Manage'
• Use a more specific selector when enabling/disabling the Submit button on the WebAuthn form
• New option: Options -> User options -> Recommended strong two-step options (defaults to 2)
• The user's two-step page will show a notice about not having enough strong two-step options if they have less than the number set under options (a reminder to users that they should have more...

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security & Passkeys with a new update entry:

changelog

• Checking for PHP version 7.1.0 or higher
• Removed dependency on third-party library to get list of countries for sessions and trusted devices

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security & Passkeys with a new update entry:

changelog

ive the user a better error message if they try to create a Passkey entry without actually registering a Passkey.

Read the rest of this update entry...

 

[axtona]

thanks to dear member @jessy updated [DigitalPoint] Security & Passkeys with a new update entry:

changelog

• Added ability to view and delete remembered sessions in admin area (new Sessions tab when editing a user)
• Fix for PHP warning when on PHP 8 and accessing site through localhost (a test setup)

Read the rest of this update entry...