Em março 30, 2020 15:07 Levente Polyak via arch-devops escreveu:

Hey folks,

we have been discussing this in a small round and want to transition the hetzner billing directly to SPI. This requires them to access the account once to insert the billing data in the accounting page.

All this will be done in a secure manner, however even through we have two-factor in place we may want to change the password afterwards.

cheers, Levente

Did we ever explore the virtual card number option with them, at all? I'm not comfortable with this, but as long as there's no other option, we do it and change password and 2FA master seed. Regards, Giancarlo Razzolini

On 3/30/20 8:19 PM, Levente Polyak via arch-devops wrote:

On 3/30/20 8:11 PM, Giancarlo Razzolini wrote:

...

Em março 30, 2020 15:07 Levente Polyak via arch-devops escreveu:

...

Hey folks,

we have been discussing this in a small round and want to transition the hetzner billing directly to SPI. This requires them to access the account once to insert the billing data in the accounting page.

All this will be done in a secure manner, however even through we have two-factor in place we may want to change the password afterwards.

cheers, Levente

Did we ever explore the virtual card number option with them, at all? I'm not comfortable with this, but as long as there's no other option, we do it and change password and 2FA master seed.

Regards, Giancarlo Razzolini

Neither do I, but no, there is no virtual credit card or other option available. We won't hand over the 2FA seed so nobody will need to change their 2FA setup.

I tried finding a better way, but there is none :S We already trust SPI with our value, so I don't think this is really an issue if we swap the first-factor afterwards.

cheers, Levente

FYI: The Hetzner SPI payment handover has been finished. I've changed our password before the online meeting to something temporary and handed it out via PGP to SPI. I've changed it back to the original password now, so there won't be any actions required on devops member side and the password inside the vault is the functional one. cheers, Levente

On 13/04/2020 18:41, Levente Polyak via arch-devops wrote:

On 3/30/20 8:19 PM, Levente Polyak via arch-devops wrote:

...

On 3/30/20 8:11 PM, Giancarlo Razzolini wrote:

...

Em março 30, 2020 15:07 Levente Polyak via arch-devops escreveu:

...

Hey folks,

we have been discussing this in a small round and want to transition the hetzner billing directly to SPI. This requires them to access the account once to insert the billing data in the accounting page.

All this will be done in a secure manner, however even through we have two-factor in place we may want to change the password afterwards.

cheers, Levente

Did we ever explore the virtual card number option with them, at all? I'm not comfortable with this, but as long as there's no other option, we do it and change password and 2FA master seed.

Regards, Giancarlo Razzolini

Neither do I, but no, there is no virtual credit card or other option available. We won't hand over the 2FA seed so nobody will need to change their 2FA setup.

I tried finding a better way, but there is none :S We already trust SPI with our value, so I don't think this is really an issue if we swap the first-factor afterwards.

cheers, Levente

FYI: The Hetzner SPI payment handover has been finished. I've changed our password before the online meeting to something temporary and handed it out via PGP to SPI. I've changed it back to the original password now, so there won't be any actions required on devops member side and the password inside the vault is the functional one.

Nice! Thanks for the keeping arch rolling :)