Oh yeah, I totally agree; we shouldn't need a third-party tool to do something that should already be offered by the MyGov website. I understand that maybe they didn't trust TOTP apps to support SHA512 hashes (I know that when I tried with LastPass Authenticator, it just *ignored* the SHA512 bit and tried to use the key with a SHA1 hash, resulting in the wrong code with no explanation or error), but there are better options than *forcing* people to use an app like this.
On Tue, Mar 24, 2020, at 17:58, Ben Sturmfels wrote: > Thanks Matt, that's encouraging, I'll have to try that out! > > I still think that it's worth some activism here though - > non-technologists shouldn't be second class citizens and we shouldn't > have to work around the systems that we pay for. > > On 24/3/20 5:49 pm, Matt Cengia wrote: > > This may be the only "official" way to sign in, but it's not the only > > option. MyGovID just does TOTP with SHA512, so assuming you have a TOTP > > app that doesn't just do SHA1 (I use FreeOTP+, but there are plenty of > > other options), you can use the tool that this clever human wrote, that > > basically pretends to be the MyGovID app for the purposes of set-up, and > > gives you a regular QR-code to feed to your TOTP app: > > https://github.com/abrasive/mygov-totp-enroll > > > > On Tue, Mar 24, 2020, at 17:44, Ben Sturmfels wrote: > >> Hi Folks, > >> > >> I've just sent a letter to the Commissioner of Taxation about the > >> rollout of MyGovID as the only way to log in to the ATO Business Portal. > >> This is attached in case there are any business owners who I can > >> encourage to also speak out. > >> > >> Essentially the ATO is switching off the nice email/password/SMS-code > >> MyGov login method I use to access the Business Portal to manage > >> tax/GST/PAYG/super. The are replacing this with login via a proprietary > >> mobile app called, confusingly, MyGovID. I'm late to the party, with the > >> changeover due in only a few days time, but better late than not heard > >> at all. > >> > >> I've sent this to the ATO by post and via their > >> complaints form: > >> > >> https://www.ato.gov.au/About-ATO/Contact-us/Complaints,-compliments-and-suggestions/Compliments-and-suggestions/ > >> > >> I've also contacted our Federal MP about the issue. > >> > >> Stay safe! > >> > >> Ben > >> > >> _______________________________________________ > >> Free-software-melb mailing list > >> Free-software-melb@lists.softwarefreedom.com.au > >> https://lists.softwarefreedom.com.au/cgi-bin/mailman/listinfo/free-software-melb > >> > >> > >> Free Software Melbourne home page: http://www.freesoftware.asn.au/melb/ > >> > >> *Attachments:* > >> > >> * ato-mygovid.pdf > > > > -- > > Regards, > > Matt Cengia (he/him/his) > > > > -- Regards, Matt Cengia (he/him/his) _______________________________________________ Free-software-melb mailing list Free-software-melb@lists.softwarefreedom.com.au https://lists.softwarefreedom.com.au/cgi-bin/mailman/listinfo/free-software-melb Free Software Melbourne home page: http://www.freesoftware.asn.au/melb/
