News for hackers. Stuff that matters.

A comment on CircleCI trusts 8 analytics companies with your source code and API tokens. Parent comment

Re:CircleCI trusts 8 analytics companies with your source co... by dabernathy89 on Tuesday October 10, 2017 @12:56PM (#15443358)
I tend to just stick all my 2FA backup codes into "secure notes" in LastPass.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by ihattendorf on Tuesday October 10, 2017 @01:16PM (#15443523)
That sort of defeats the purpose of 2FA though. Now if your LastPass database is compromised, they have access to your 2FA codes as well.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by dabernathy89 on Tuesday October 17, 2017 @03:26PM (#15494047)
True. I think it's a bit of a security compromise for convenience. Having backup codes stuck in a folder somewhere at home is only useful if I need to regain access to one of my accounts while I'm at home.
[ Parent | on HN ]