News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials. Parent comment

Re:ESLint compromised, may have stolen your credentials by snowwolf on Thursday July 12, 2018 @03:10PM (#17517657)
Why did you need to write a script? GitHub allows you to enforce 2FA at the organisation level.

https://help.github.com/articles/requiring-two-factor-authen...

[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by Kalium on Thursday July 12, 2018 @03:11PM (#17517669)
You're absolutely right! GitHub does offer that wonderful feature.

There are some legacy bot accounts that we cannot readily tradition to 2FA and we cannot do without. The feature you have so rightly pointed to would evict them from the org. That's not an acceptable outcome in this case.

I skipped over this in my previous comment because I felt it wasn't germane to the story or the point.

[ Parent | on HN ]