News for hackers. Stuff that matters.

A comment on CircleCI trusts 8 analytics companies with your source code and API tokens. Parent comment

Re:CircleCI trusts 8 analytics companies with your source co... by orginal__idear on Tuesday October 10, 2017 @12:28PM (#15443089)
> "Don't ever let me disable 2FA" setting.

I like this idea. I'd only want to use this though if my Google 2FA backup codes are backed up via Authy or a similar app.

I don't trust codes I've printed out and have always lost.

[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by rhizome on Tuesday October 10, 2017 @12:48PM (#15443273)
Have you considered getting a safe-deposit box?
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by dabernathy89 on Tuesday October 10, 2017 @12:56PM (#15443358)
I tend to just stick all my 2FA backup codes into "secure notes" in LastPass.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by ihattendorf on Tuesday October 10, 2017 @01:16PM (#15443523)
That sort of defeats the purpose of 2FA though. Now if your LastPass database is compromised, they have access to your 2FA codes as well.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by dabernathy89 on Tuesday October 17, 2017 @03:26PM (#15494047)
True. I think it's a bit of a security compromise for convenience. Having backup codes stuck in a folder somewhere at home is only useful if I need to regain access to one of my accounts while I'm at home.
[ Parent | on HN ]