Oh yeah, I totally agree; we shouldn't need a third-party tool to do something that should already be offered by the MyGov website. I understand that maybe they didn't trust TOTP apps to support SHA512 hashes (I know that when I tried with LastPass Authenticator, it just *ignored* the SHA512 bit and tried to use the key with a SHA1 hash, resulting in the wrong code with no explanation or error), but there are better options than *forcing* people to use an app like this. On Tue, Mar 24, 2020, at 17:58, Ben Sturmfels wrote:
Thanks Matt, that's encouraging, I'll have to try that out!
I still think that it's worth some activism here though - non-technologists shouldn't be second class citizens and we shouldn't have to work around the systems that we pay for.
On 24/3/20 5:49 pm, Matt Cengia wrote:
This may be the only "official" way to sign in, but it's not the only option. MyGovID just does TOTP with SHA512, so assuming you have a TOTP app that doesn't just do SHA1 (I use FreeOTP+, but there are plenty of other options), you can use the tool that this clever human wrote, that basically pretends to be the MyGovID app for the purposes of set-up, and gives you a regular QR-code to feed to your TOTP app: https://github.com/abrasive/mygov-totp-enroll
On Tue, Mar 24, 2020, at 17:44, Ben Sturmfels wrote:
Hi Folks,
I've just sent a letter to the Commissioner of Taxation about the rollout of MyGovID as the only way to log in to the ATO Business Portal. This is attached in case there are any business owners who I can encourage to also speak out.
Essentially the ATO is switching off the nice email/password/SMS-code MyGov login method I use to access the Business Portal to manage tax/GST/PAYG/super. The are replacing this with login via a proprietary mobile app called, confusingly, MyGovID. I'm late to the party, with the changeover due in only a few days time, but better late than not heard at all.
I've sent this to the ATO by post and via their complaints form:
https://www.ato.gov.au/About-ATO/Contact-us/Complaints,-compliments-and-sugg...
I've also contacted our Federal MP about the issue.
Stay safe!
Ben
_______________________________________________ Free-software-melb mailing list Free-software-melb@lists.softwarefreedom.com.au https://lists.softwarefreedom.com.au/cgi-bin/mailman/listinfo/free-software-...
Free Software Melbourne home page: http://www.freesoftware.asn.au/melb/
*Attachments:*
* ato-mygovid.pdf
-- Regards, Matt Cengia (he/him/his)
-- Regards, Matt Cengia (he/him/his)