Re:GitHub will disable non-2FA accounts?
by nonameiguess on Tuesday August 15, 2023 @10:44AM
(#37134609)
2FA is only required to login to the Github web app through your browser. You can perform API actions with a personal access token you can make as long-lived as you want, certainly long enough to last through a vacation.
[ Parent
| on HN ]
Re:GitHub will disable non-2FA accounts?
by grayhatter on Tuesday August 15, 2023 @11:34AM
(#37135236)
I'm not foolish enough to bring any access control device through customs. That includes sessions keys. So either I bring everything, or nothing, and nothing is the safer security decision.
Re:GitHub will disable non-2FA accounts?
by saltcured on Tuesday August 15, 2023 @12:43PM
(#37136136)
After reading through several of your comment chains on this thread, I suspect something like a yubico security key with PIN protection enabled may be your least-bad option for travel with a second factor. The USB A ones are flat and thin and so easily carried whether in pockets, wallets, on a keychain, or even on a temporary necklace. The hardware is supposed to be somewhat resistant to key extraction, and the PIN means someone cannot instantly use it if taken from you.
Re:GitHub will disable non-2FA accounts?
by grayhatter on Tuesday August 15, 2023 @01:09PM
(#37136499)
I have no problem with 2fa. I have both available on my GH account. I think it's a bad decision, but I've been using 2fa on GH for over 10 years. I'm not arguing for myself, I'm arguing for others and for what's correct. In my case, i'm fortunate enough that when I need to go through customs, I have the luxury of being able to leave my 2fa at home :)