Re:Ask HN: Developer abused “sign in with GitHub”?
by ThunderSizzle on Friday December 09, 2022 @07:42AM
(#33920603)
2FA isn't the end all be all if it can lock me out by losing a device or an arbitrary number I dont actually own (e.g. sms 2fa)
Re:Ask HN: Developer abused “sign in with GitHub”?
by _Algernon_ on Friday December 09, 2022 @06:47AM
(#33920260)
With a password manager, keeping track of 10 passwords is barely any more effort than one user account. Same thing is true for 2fa secrets.
Re:Ask HN: Developer abused “sign in with GitHub”?
by itsacomment on Friday December 09, 2022 @07:21AM
(#33920462)
Use authenticator apps or things like yubikeys for 2fa, using your phone number is not a security benefit but an exploit waiting to happen at this point.
You have one account with stronger sec. Like 2fa instead of 10 random accounts without 2fa cuz you dont want to give ya phone number to untrusted ppl