GitHub will require 2FA by the end of 2023

Re:GitHub will require 2FA by the end of 2023 by jason0597 on Thursday May 05, 2022 @03:49PM (#31277699)

What people should do is have a small SD card with all of their private keys and passwords stored away safely. This SD card should be kept in cold storage (e.g. in a safe where you keep personal belongings), and never be accessed unless in absolute emergency (lost your YubiKey etc and can't get in anywhere, etc.)

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by Lifelarper on Thursday May 05, 2022 @04:06PM (#31277860)

SD cards are horrendous for long term storage. Probably the worst medium for such a task.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by adamiscool8 on Thursday May 05, 2022 @04:23PM (#31277983)

What is the best? Cursory googling suggests SD cards last ~decades at normal usage [0], and in this context where it's barely accessed, maybe longer?

[0] https://www.sdcard.org/consumers/faq

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by justinclift on Friday May 06, 2022 @10:31AM (#31285557)

Probably depends on the quantity of data. If you're talking GB's or TB's of digital data, then maybe "archival grade" DVD's or BluRay's.

https://www.verbatim.com.au/product-category/data-storage/op...

If it's instead just a few short strings of text (eg GH password recovery codes), then you could use physical storage.

eg engrave the codes into something that'll survive extremes (granite?), and keep them in a fire proof safe.

Or something along similar lines. Probably don't engrave into glass though, due to that potentially shattering in some situations.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by 0x073 on Thursday May 05, 2022 @04:46PM (#31278199)

If you go to bluray.com you probably can read the same only for blu-ray.

Better search for a neutral source.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by _whiteCaps_ on Thursday May 05, 2022 @05:44PM (#31278715)

I wrote some scripts to generate QR codes, then printed them to photo paper.

https://github.com/alexjh/gpg-backup/blob/master/Makefile

Back then I thought that QR codes were a bit of a gimmick but now I'm way more confident that I'll be able to read them in the future.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by IYasha on Monday May 09, 2022 @08:00AM (#31313066)

My choice are 8cm DVDs of decent quality. And inability to quickly overwrite/damage your data is a bonus.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by Brian_K_White on Friday May 06, 2022 @12:57AM (#31281476)

laser print

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by jrochkind1 on Friday May 06, 2022 @12:31PM (#31287090)

Do most people have a "safe where they keep their personal belongings"?

i guess it would presumably be on-premises, because you're going to have to take it out to add recovery codes to it every time you add a new TOTP or whatever (or create a new private key or password) right? If it was, say, a safety deposit box at a bank, odds are it's not gonna wind up with most of your stuff. Even on-premises, the task of making sure "cold storage" stays sync'd with my evolving passwords, private keys, TOTP recovery codes, etc, seems like something I'm unlikely to keep up with.

[ Parent | on HN ]

Re:GitHub will require 2FA by the end of 2023 by marssaxman on Sunday May 08, 2022 @01:42PM (#31306257)

I have an IronKey for this purpose.

[ Parent | on HN ]