News for hackers. Stuff that matters.
Re:Websites that look like desktop GUIs by asveikau on Sunday July 05, 2020 @04:36AM (#23737366)
I was explaining to someone how to generate an SSH key, they way I would normally do when explaining git to someone not exposed.

They instead used the GitHub app and their GitHub password. I didn't see any interaction with an SSH key.

I am not sure how I feel about that. Something seems not right about it.

Re:Websites that look like desktop GUIs by thr0w3345 on Sunday July 05, 2020 @06:47AM (#23737797)
You can use http basic since forever with git....
Re:Websites that look like desktop GUIs by WorldMaker on Monday July 06, 2020 @02:58PM (#23751433)
This isn't HTTP Basic Auth, though: these days git with the right Credential Managers (and Git for Windows comes with a good one built in) support OAuth Access Tokens obtained with full OAuth login flows including 2FA authentication. It's theoretically no worse than SSH PKI, and in terms of practicality is often better because it is easier and more convenient. (For the users, it is clearly more complex that "install openssh" to implement if you are trying to build a git host that supports OAuth Access Token auth.)
Re:Websites that look like desktop GUIs by Aeolun on Sunday July 05, 2020 @08:04AM (#23738057)
Yes, but something doesn’t feel right about it no?
Re:Websites that look like desktop GUIs by kdmytro on Sunday July 05, 2020 @07:51AM (#23738007)
Why?
Re:Websites that look like desktop GUIs by strogonoff on Monday July 06, 2020 @03:14AM (#23745467)
Recently I helped someone get set up with VS Code and Git, and it subverted all of my preparations by simply popping up an OAuth window to authenticate.