News for hackers. Stuff that matters.
Re:GitHub will require 2FA by the end of 2023 by eastbound on Thursday May 05, 2022 @01:35PM (#31276280)
Besides, where do you store your 2FA backup codes? At home?? Where they could be stolen without your knowledge? Most people’s homes are less safe than their online life.
Re:GitHub will require 2FA by the end of 2023 by bcrosby95 on Thursday May 05, 2022 @02:29PM (#31276893)
I would be more concerned about fire or natural disaster.

If your house catches on fire while you're asleep, there's decent odds both your phone and any printed codes are gone.

Re:GitHub will require 2FA by the end of 2023 by faho on Thursday May 05, 2022 @03:08PM (#31277285)
With 2FA someone can break into your home, find your 2FA backup codes, defeat your password (e.g. by finding it in a leak) and they're in. If they are targeting you from your online life they need to first find out where you live and travel there.

Without 2FA someone can defeat your password and they're in.

Re:GitHub will require 2FA by the end of 2023 by joshvm on Thursday May 05, 2022 @02:40PM (#31277005)
The historic solution is in a safety deposit box at a bank. If you're talking about things like crypto cold wallets which might be extremely valuable, why risk leaving it at home? The cost for small items like documents tends to be reasonable. Good practice for things like ownership deeds and wills.

I don't think the average home thief would know what to do with a printout of your 2FA recovery code especially if it's buried in other paperwork. The real risk is loss from negligence or natural disaster.

Re:GitHub will require 2FA by the end of 2023 by danuker on Thursday May 05, 2022 @01:45PM (#31276414)
Maybe a safe or cameras would be useful for when you're not home. I sometimes leave my laptop on with motion started: https://motion-project.github.io/
Re:GitHub will require 2FA by the end of 2023 by pmoriarty on Thursday May 05, 2022 @02:08PM (#31276675)
You could store them encrypted with a passphrase that only you know, so even if they're stolen they would be useless without your passphrase.
Re:GitHub will require 2FA by the end of 2023 by TedDoesntTalk on Thursday May 05, 2022 @02:39PM (#31276995)
You could also encode them in DNA nucleotides and use CRISPR to modify your own DNA with your GitHub codes. /s