GitHub will require all code contributors to use two-factor authentication

Re:GitHub will require all code contributors to use two-fact... by alar44 on Thursday May 05, 2022 @10:10AM (#31273569)

"knows what they're doing" doesn't have anything to do with it. If you don't have MFA, your account is going to get compromised by one of the billion bots trying to get it. Tell me you don't understand basic security without telling me you don't understand basic security.

[ Parent | on HN ]

Re:GitHub will require all code contributors to use two-fact... by selfhoster11 on Friday May 06, 2022 @04:26AM (#31282769)

That's not how it works. I have strong randomly-generated passwords for most sites, and store them in a password manager that I only ever load on ~3 devices that I completely trust and own. Short of typing the password in on a compromised machine, a "forgot password" reset (via the website or customer support), or being incautious enough to log in via a phishing form, I see no way that my accounts can be compromised.

And as I said, for some accounts, there are no consequences if they are compromised.

[ Parent | on HN ]

Re:GitHub will require all code contributors to use two-fact... by RealStickman_ on Thursday May 05, 2022 @11:34AM (#31274670)

I have a few accounts I view as valuable enough to enable 2FA on.

This change in Github will just lead to me either being more annoyed or storing the TOTP generator code in my password manager.

[ Parent | on HN ]