RETROARCH LIBRETRO CODE
RETROARCH LIBRETRO PASSWORD
RETROARCH LIBRETRO OFFLINE

Here's a very interesting blog post from Bitwarden explaining 2FA in general, and their system:Īlso, they answer the question 'some may ask what is the point of having your username, email, and your two-step login code all stored within the same application ? Doesn’t that negate the value of two-step login?'

RETROARCH LIBRETRO PASSWORD

You don't need a second device (which is a security risk), but it is still way harder to hack your account since the hacker should have direct access to your machine in order to get both your password and the TOTP address (which are protected by a main password in Bitwarden). Or with tools like Yubikey that can be used for the same, but also as main way to authentication in websites, any developer complaining about the nuisance of 2FA goes into the 'Suspicious list' right away.And there's also Bitwarden which simplifies it even more with storing the TOTP url. With setups like MFA from Azure AD, with the Authenticator app, where not even a code is needed to use the 2nd factor. Quoting: ArehandoroI face this constantly at work. Or with tools like Yubikey that can be used for the same, but also as main way to authentication in websites, any developer complaining about the nuisance of 2FA goes into the 'Suspicious list' right away.Īnd I'm a 'quick to pull the trigger' kind of admin when it comes to revoking access to systems xD Speaking on Twitter, they mentioned how some developers felt it was 'too much of a pain' and they didn't want to lose those contributors.

QuoteThis little detail was left out of their announcement, but they didn't force 2FA which appears to be how the attacker actually got in. RetroArch and everything preceding it on page 3 has been left intact before his access got curtailed. He managed to do damage to 3 out of 9 pages of repositories. He gained access to our Libretro organization on Github impersonating a very trusted member of the team and force-pushed a blank initial commit to a fair percentage of our repositories, effectively wiping them. The websites for these have also been rendered inaccessible for the moment QuoteHe accessed our buildbot server and crippled the nightly/stable buildbot services, and the netplay lobby service. Not a fan of conspiracy theories, but maybe some companies that don't like the idea of having their older titles being emulated. Quoting: TheSHEEEPWhat an odd choice of target practice for a hacker. Well, was it worth it? Let's hope proper security will be implemented now. This little detail was left out of their announcement, but they didn't force 2FA which appears to be how the attacker actually got in. This is another reminder of: backups, backups-backups! More than that though, it's also an example of why two factor authentication is also vitally important. They said it's due to funding, as they don't have enough for it with a note about supporting them on Patreon to help. Something that's generally vital for larger projects.

RETROARCH LIBRETRO OFFLINE

However, thanks to it the Core installer is offline as are the 'Update Assets', 'Update Overlays', 'Update Shaders' functions.Īlso mentioned is how they didn't have automated backups of their buildbot, a service which helps to automate building the application and testing. Some good news though: for users they said no Cores or RetroArch installs should be considered compromised, as the attacker was too busy with wiping things and being a nuisance.

GitHub themselves have replied ( source) to mentioned they can't help, so they're now relying on local backups and Git history from their developers to get it back to where it was online. He gained access to our Libretro organization on Github impersonating a very trusted member of the team and force-pushed a blank initial commit to a fair percentage of our repositories, effectively wiping them.He accessed our buildbot server and crippled the nightly/stable buildbot services, and the netplay lobby service.In the announcement, they mentioned the scale of the damage that was done comes down to: While restoration is ongoing, some of it is going to be more difficult. In an announcement, the Libretro / RetroArch mentioned how the Libretro / RetroArch organization on GitHub was attacked by hackers and they managed to do quite a bit of damage.

Retroarch libretro