News for hackers. Stuff that matters.

A comment on GitHub Security Update: Reused Password Attack. Parent comment

Re:GitHub Security Update: Reused Password Attack by kstenerud on Thursday June 16, 2016 @12:17PM (#11917096)
So what happens if you lose the dongle?
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by jrockway on Thursday June 16, 2016 @06:43PM (#11919483)
I have YubiKey Nanos "permanently installed" in each computer I use, as well as a portable one. If I lose all my computers, and my keys, and my phone... I guess I'll have to make a new Github account. It's all open-source anyway!
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by pfg on Thursday June 16, 2016 @03:05PM (#11918159)
You can add multiple keys, so you could have a primary one that's with you and another one that's stored somewhere safe. You can also configure OTP and/or SMS-based 2FA and backup/recovery codes as a fallback mechanism.
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by danneu on Thursday June 16, 2016 @02:00PM (#11917759)
You use the customer support backdoor.
[ Parent | on HN ]