GitHub Raises $250M at $2B Valuation

Re:GitHub Raises $250M at $2B Valuation by jlebar on Wednesday July 29, 2015 @10:25PM (#9972899)

> Did you really claim 2-factor authentication as your primary differentiation for choosing source control? Really?

As someone who used to have keys to a number of security-critical OSS projects, I would never use password-only authentication to protect write access to my repo.

It's not just the chance of someone sneaking in a change and its getting shipped to users -- although that's also awful -- but it's also the chance of someone sneaking in a change that pwns all of your developers (by running a script as part of the build).

And if you're using a private repository and care about keeping your source code secret, then you really, really, really want 2FA.

[ Parent | on HN ]

Re:GitHub Raises $250M at $2B Valuation by bsder on Wednesday July 29, 2015 @10:41PM (#9972943)

> And if you're using a private repository and care about keeping your source code secret, then you really, really, really want 2FA.

Um, if I need this, I'm not handing my data to github. Thanks.

[ Parent | on HN ]

Re:GitHub Raises $250M at $2B Valuation by count on Wednesday July 29, 2015 @11:26PM (#9973031)

Github enterprise edition. Not the cloud service.

[ Parent | on HN ]

Re:GitHub Raises $250M at $2B Valuation by homakov on Wednesday July 29, 2015 @11:21PM (#9973022)

So true, actually.

[ Parent | on HN ]