News for hackers. Stuff that matters.

A comment on GitHub will require 2FA by the end of 2023. Parent comment

Re:GitHub will require 2FA by the end of 2023 by newjersey on Thursday May 05, 2022 @01:37PM (#31276304)
On gnome on fedora at least, I can have my gpg automatically unlock when I login to the desktop.

I already have two steps on GitHub with the authy app but I don't get it. Why is it not good enough to send an email with a code when signing in without a cookie for people who don't want to opt in to two steps?

The way I see it my authy is a vulnerability because if someone were to guess my authy phone number, they could technically grab all of my TOTP.

I don't get this spoon feeding. I mean I would sign up to two steps where I can but something doesn't feel right about the lack of choice.

[ Parent | on HN ]
Re:GitHub will require 2FA by the end of 2023 by waynesonfire on Thursday May 05, 2022 @02:10PM (#31276702)
i hate checking email or looking at my phone for two step auth. either choice requires me to access another system. It requires far fewer steps to just tap the button on the side of the yubikey.
[ Parent | on HN ]