Looks like gitlab now requires account verification for new accounts in addition to email. Either phone number or credit card.
This applies both to accounts created with a working email or by logging in using your github account. You can’t even verify your email until you go through step 1.
I don’t know when this started, but at least for the last month or two judging from these posts in the forums.
- https://forum.gitlab.com/t/how-to-create-an-account-without-telephone-number-if-an-non-activated-account-has-already-been-created-with-the-same-e-mail-address-that-demands-a-phone-number/93675/2
- https://forum.gitlab.com/t/phone-verification-sms-not-received-unable-to-login-and-register/92202
- https://forum.gitlab.com/t/how-to-create-an-account-without-telephone-number-if-an-non-activated-account-has-already-been-created-with-the-same-e-mail-address-that-demands-a-phone-number/93675/2
Fun fact: I don’t even want to host on gitlab, I just wanted to report bugs in some projects. So I’m locked out.
I’d assume this will be a non issue once they implement ActivityPub. They can enable whatever account restrictions on their gitlab instance, but if I don’t want to provide this information to report a bug, then I can use another instance or self host my own, without the account restrictions.
You really think they will add a full ActivityPub implementation? I highly doubt it.
For discussions probably. Not for repos.
From the Summary in the link:
The end goal of this proposal is to build interoperability features into GitLab so that it’s possible on one instance of GitLab to open a merge request to a project hosted on an other instance, merging all willing instances in a global network
That’s great news!
Debit card masking services are neat and all, but this is ridiculous
I was asking like less then a month ago what’s wrong with gitlab when Firefox switched to GitHub, now I know.
Well they can just GitOut
Removed by mod
Why GitLab!?
Because it’s a decent competitor to the GitHub monopoly. It also has a few unique features when compared to it. Just guessing why OP uses it though (many people do)
Sorry, I meant “GitLab, why’d you do that!?”
(I’m a GitLab user myself)
Oh, well then you forgot your comma
Oh right
This really sucks for bug reporting. I don’t mind this at all for hosting as that cost notable resources (especially their free CI tier) and they can set their own terms, but I want people to be able to report bugs without any trouble. (Although if spam is an issue maybe projects could opt-in to requiring this verification to report bugs).
A work-around is maybe the service desk feature allowing reporting bugs via email but this has issues for proper collaboration:
- The reporter’s email is shared.
- The issue is private by default.
- Can’t collaborate on an existing issue.
Maybe I’ll just go back to mailing lists… Or GitHub has gotten better recently. But GitLab’s CI is so much better.
I want people to be able to report bugs without any trouble.
Thank you for being aware! I’ve experienced this on github.com. I’ve tried to submit issues several times to open source projects, complete with proposed code to solve a bug, but github shadowbans my account 6 hours after creating it (because I use a VPN? a third-party email provider? do not provide a phone number? who knows). I can see the issue and pull request when logged in, but they only see a 404 on their project page even if I give them a direct link. I ended up sending them a screenshot of the issue page just to convince them this was even possible. Sad to hear gitlab does it even worse now by making phone mandatory.
sorry but deleting the account is absolutely ridiculous.
mark it inactive but just deleting someone’s entire git history because they didn’t put in a phone number or credit card is so dumb.
i don’t even need a phone number or credit card for my github account.
deleting someone’s entire git history
Based on the image text this is for new accounts only. My account has neither phone nor credit card and I’ve not been asked to re-verify. Maybe they’re having problems with bots at the moment.
Maybe they’re having problems with bots at the moment.
I have to go through the ridiculous cloudfare verification page now. How do they have a bot issue?
Good thing it’s only deleting your account if it’s a new account that you didn’t finish the registration process for
I think this is for new accounts only, if you already have an account, your E-Mail will already be verified
Just tried this out using a typical temporary email address (temp-mail.org) and a VPN (AirVPN).
I was only asked to confirm my e-mail address within 3 days, never for a phone address or any banking details.Judging by the first post you’ve linked to, it’s only necessary for paid accounts or free trials.
The person in the second post is trying to register via GitHub / Google, well… sucks for them.I’ve tried a few times in the past 2 weeks. Using a good email account and also with github, no luck though. Maybe its doing some “smart” heuristics to trigger it.
I just retried now, using that temp mail (but no vpn) and got the exact same phone verification. Maybe my IP address is evil :D
Time to start using GitDirectory named V.01 shared over FTP.
It’s a joke, don’t use FTP, it’s not secure.
Is there any reference for this? I can’t find anything relevant. Just curious.
Of FTP not being secure? Check the links in the comments below
FTP it’s not encrypted
No. I mean gitdirectory over FTP.
There’s no GitDirectory, it’s the way we used to share files back then, a shared directory over FTP
I’m aware of FTP. It’s still around in certain circles. But for a moment I thought that there was some sort of integration between ftp and git. I guess not.
fuck them
Removed by mod
Damn, that sucks
What’s the best way to circumvent phone number verification ? My burner YouTube account, which has nothing unsavory on it, has been marked for phone number verification or else I can’t login at all.
Of course I’m not giving them my real phone number. What the best way to fake this?
There are paid services that offer phone number masking such as Firefox Relay
I tried VoIP addresses and got the message “we can’t use that number”. Is Firefox relay immune to that?
get a burner sim. pay cash.
But using the sim will identify location and IMEI. Anyway that’s quite expensive, like 10$ per account ? Ouch !
deleted by creator
There had to way to defeat the pots system, it’s an antique, not a security system
Experienced the same issue when I tried to sign up 2-3 months. Went down a rabbit hole and then just decided to not host w/ them.
There is a workaround where you can create an account if it is on a different gitlab instance (ie: I was able to join https://git.joinfirefish.org/ w/o the CC info) but I don’t know how useful that is in the grand scheme of things.
What would you guys recommend for a service to use to verify phone numbers for platforms, on topic, such as gitlab? I know there is some sort of list of voip service providers that most of these platforms blacklist. Where do they get such lists from and how can one view such lists?
Has this already been introduced for existing accounts? Gitlab has been moving in an unsatisfying direction for a while now and these kinds of shenanigans really make me want to move.
