News for hackers. Stuff that matters.
Re:Ask HN: Developer abused “sign in with GitHub”? by hardware2win on Friday December 09, 2022 @05:21AM (#33919732)
Uh?

You have one account with stronger sec. Like 2fa instead of 10 random accounts without 2fa cuz you dont want to give ya phone number to untrusted ppl

Re:Ask HN: Developer abused “sign in with GitHub”? by ThunderSizzle on Friday December 09, 2022 @07:42AM (#33920603)
2FA isn't the end all be all if it can lock me out by losing a device or an arbitrary number I dont actually own (e.g. sms 2fa)
Re:Ask HN: Developer abused “sign in with GitHub”? by _Algernon_ on Friday December 09, 2022 @06:47AM (#33920260)
With a password manager, keeping track of 10 passwords is barely any more effort than one user account. Same thing is true for 2fa secrets.
Re:Ask HN: Developer abused “sign in with GitHub”? by itsacomment on Friday December 09, 2022 @07:21AM (#33920462)
Use authenticator apps or things like yubikeys for 2fa, using your phone number is not a security benefit but an exploit waiting to happen at this point.
Re:Ask HN: Developer abused “sign in with GitHub”? by lzaaz on Friday December 09, 2022 @05:37AM (#33919834)
And the day the "master" account gets suspended or compromised you lose access to 10 other accounts. No thanks.