News for hackers. Stuff that matters.

A comment on GitHub will require 2FA by the end of 2023. Parent comment

Re:GitHub will require 2FA by the end of 2023 by zackees on Thursday May 05, 2022 @02:12PM (#31276722)
Their security model locks users out.

I nearly lost all my passwords with LastPass when something similar happened to me.

Is grandma supposed to file her 128 character recovery code in a safe vault when she just wants to get from the airport?

Stop blaming users for them not adapting to terrible authentication experience.

[ Parent | on HN ]
Re:GitHub will require 2FA by the end of 2023 by pmoriarty on Thursday May 05, 2022 @02:45PM (#31277059)
I'd be interested in hearing about a better model.

To me they're all terrible in one way or another.

[ Parent | on HN ]
Re:GitHub will require 2FA by the end of 2023 by zackees on Thursday May 05, 2022 @06:29PM (#31279079)
If the security is this important then recovery should involve AI facial recognition with human fallback to unlock a device.

Or else submitting a passport / drivers license to force unlock.

We have global identity systems. Why not use them?

[ Parent | on HN ]