News for hackers. Stuff that matters.

A comment on How to build an NPM worm.

Re:How to build an NPM worm by snek on Friday July 13, 2018 @01:19AM (#17520683)
even if you want to use 2FA with npm, they seemingly don't want you to: https://i.imgur.com/2LoEURl.png
[ Parent | on HN ]
Re:How to build an NPM worm by alangpierce on Friday July 13, 2018 @01:23AM (#17520700)
> they seemingly don't want you to

What makes you say that? The "not recommended" action in their screenshot is to disable 2FA. (I did find the screen a little confusing when setting up 2FA just now, though; it wasn't clear that it was picking between three different actions.)

[ Parent | on HN ]
Re:How to build an NPM worm by snek on Friday July 13, 2018 @01:29AM (#17520717)
sorry if i wasn't clear. the fact that npm lets you choose an option with downgraded security (the first option) blows my mind.
[ Parent | on HN ]