News for hackers. Stuff that matters.

A comment on GitHub will require all code contributors to use two-factor authentication.

Re:GitHub will require all code contributors to use two-fact... by akomtu on Wednesday May 04, 2022 @12:45PM (#31262871)
In other words, github wants your phone number too. They even bothered to come up with a cute reason: increasing security in the age of supply chain attacks.
[ Parent | on HN ]
Re:GitHub will require all code contributors to use two-fact... by emidln on Wednesday May 04, 2022 @12:52PM (#31262959)
GitHub does not have my phone number (although it's trivial to obtain). I use their TOPT 2FA.
[ Parent | on HN ]
Re:GitHub will require all code contributors to use two-fact... by marbu on Wednesday May 04, 2022 @12:52PM (#31262949)
Afaik github doesn't force you to reveal your phone number, you can setup OTP or U2F token instead.
[ Parent | on HN ]
Re:GitHub will require all code contributors to use two-fact... by pengaru on Wednesday May 04, 2022 @01:10PM (#31263197)
While this is certainly true in many places where SMS 2FA is being required, as others have noted you can just use TOTP oh github, see oathtool.
[ Parent | on HN ]
Re:GitHub will require all code contributors to use two-fact... by davidmichael on Wednesday May 04, 2022 @12:51PM (#31262948)
You can use a security key or TOTP app instead of providing your phone number.
[ Parent | on HN ]
Re:GitHub will require all code contributors to use two-fact... by TheRealNGenius on Saturday May 07, 2022 @03:56PM (#31297984)
no, fuck this and fuck you
[ Parent | on HN ]