NCSG

[Jean F. Quéralt]

Dear all,

Following up on pending tasks/handovers as 30 days have passed. Please find
my comments inline below.


> *Handover Tasks*
>


> *- Vaultwarden*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
Pursuant to my initial email, I am to understand that the platform is no
longer of interest to NPOC EC so I have proceeded to:
- Remove all the 2FA/MFA settings in all accounts that had them
- Create 1 full dump of credentials (Master Dump) that has been sent to the
NPOC EC Chair
- Create 1 partial dump of credentials (Outreach Dump - corresponding to
outreach accounts) that has been sent to the NPOC Outreach Chair
- Both files are password protected (Passwords have been sent to the
corresponding persons separately)
- Take down the Vaultwarden instance (as a result Vault.NPOC.org is no
longer operational)
- Remove the A record *Vault *from NPOC's DNS
- Destroyed the Master Dump and the Outreach Dump from my storage

I would emphatically advise the NPOC EC to:
- Immediately update all passwords of all accounts
- Store the credentials in a secured vault
- Reactivate the 2FA/MFA settings in all possible accounts in the shortest
of times
- Establish a handover procedure that facilitates the passing of
credentials to future NPOC EC members.



> *- VBout*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
Pursuant to my initial email, I am to understand that the platform is no
longer of interest to NPOC EC so I have proceeded to:
- Remove the sub account I had assigned to NPOC


*- ElkQR*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
Pursuant to my initial email, I am to understand that the platform is no
longer of interest to NPOC EC so I have proceeded to:
- Reclaim the account for my organization
- Reclaim the Appsumo account under which it was acquired (as it has both
the proof of purchase and my personal card details)
- Remove the CNAME record *QR* from NPOC's DNS



> *- Cloudflare*
>

Access to this platform is granted through the credentials on Master Dump.
As part of the clean-up process, I have proceeded to:
- Remove the CNAME record * BLOG* from NPOC's DNS
- Remove the CNAME record *DOCS* from NPOC's DNS

Note: These were CNAMEs created for services that were being implemented
for NPOC Comms and are of no utility anymore.

Note 2: Despite the fact that I don't have any passwords on my end anymore,
PLEASE change Cloudflare's password immediately.

Note 3: After the maintenance clean ups, I have no longer access to the
Cloudflare account.

*- Canva*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
Pursuant to my initial email, I am to understand that the platform is no
longer of interest to NPOC EC so I have proceeded to:
- Reclaim the account for my organization
- Requested a full download of all the templates, which has been submitted
with the Dumps
- Removed all NPOC templates from the Canva instance

Note: The rendered images, as well as the originals that were used to
create them, can be found in the Media folder inside the Shared Drive of
the NPOC.ICANN at Gmail.com account (of which NPOC EC has access to).


*- Sleekplan*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
Pursuant to my initial email, I am to understand that the platform is no
longer of interest to NPOC EC so I have proceeded to:
- Reclaim the account for my organization



> *- Google Account (NPOC.ICANN at Gmail.com - G Drive, Forms, etc.)*
>

After 30 days, no one has reached out to inform me of any decision on this
matter.
As a result, I have proceeded to:
- Remove any access I had over this account

The account can be accessed with the credentials in the Master Dump that
has been shared with the NPOC EC.

Note: This account was used to store quite an amount of information
pertaining to Comms. I recommend accessing it and decide what you want to
do with it.



> *Info at NPOC.org*
>

I still receive the emails sent to this address.
Whomever controls this list, please remove me.
Thx.


*- NPOC Github*
>

Access to this platform is granted through the credentials on Master Dump.

Note: However, as per Github policy, 2FA cannot be disabled, see below.
[image: image.png]

I tried several ways and in the case of Github this is unavoidable.

 The way to proceed with this:
- Log in using one of the Backup codes for the account (These can be found
in the Master Dump)
- Go to Account >> Settings >> Password and Authentication >> Two-factor
authentication >> Two-factor methods >> Authenticator app >> Edit then
proceed with creating a new 2FA linkage




> *- Other minor platforms*
>

Access to these platforms is granted through the credentials on Outreach
Dump and/or Master Dump.


I believe that will be all in this regard.

Regards,
Jean F. Queralt
Founder & CEO - The IO Foundation <https://theiofoundation.org/>
Book a meeting <https://tiof.click/BookJFQ> (30 minutes)

-- 
**DISCLAIMER**
*The content of this message, which may contain personal or 
sensitive data, is confidential. If you have received it by mistake, please 
inform the sender by replying to the email and then permanently delete the 
message, including any attachments. It is forbidden to copy, forward or in 
any way reveal the content of this message to anyone. The integrity and 
security of this email cannot be guaranteed over the Internet and, 
therefore, the sender will not be held liable for any damage caused by the 
message.*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ncsg.is/pipermail/ncsg-discuss/attachments/20250221/e8edb056/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 52659 bytes
Desc: not available
URL: <http://lists.ncsg.is/pipermail/ncsg-discuss/attachments/20250221/e8edb056/attachment.png>