▲ 396 ▼ GitHub to require 2FA on accounts by October 6, 2023 (github.blog) submitted 3 years ago* by Xylight@lemmy.xylight.dev to c/technology@lemmy.ml 125 comments fedilink hide all child comments I personally am fine with this.
[–] Xylight@lemmy.xylight.dev [S] 25 points 3 years ago* (last edited 3 years ago) (2 children) Use a password manager that lets you autofill 2fa, like Bitwarden. permalink fedilink source parent hideshow 4 child comments replies: [–] residentmarchant@lemmy.world 2 points 3 years ago (1 child) 1password does this, too and it's magical. I've had my SMS go to my browser via Google Messages for a while, but it's so much easier to just auto-fill it instead of copy/paste permalink fedilink source parent hideshow 2 child comments replies: [–] isVeryLoud@lemmy.ca 3 points 3 years ago Also, 1password logs you out when you stare at it wrong, so I'm not worried about someone who would somehow get local access abusing it. permalink fedilink source parent [–] library_napper@monyet.cc -1 points 3 years ago (2 children) That's bad advice permalink fedilink source parent hideshow 4 child comments replies: [–] subtext@lemmy.world 13 points 3 years ago Is it less secure than it could be? Yes. Is it better than no 2FA? Also yes. In the end if it doesn’t work for your security model, than more power to you. But if it helps to increase the security of the average Joe, it’s good advice. permalink fedilink source parent [–] argv_minus_one@beehaw.org -1 points 3 years ago (1 child) Allowing a smartphone access to anything sensitive is even worse advice. Smartphones are notoriously insecure. permalink fedilink source parent hideshow 2 child comments replies: [–] library_napper@monyet.cc 1 point 3 years ago You're right. Dont grant your smartphone access to your GitHub. Just give it one factor. permalink fedilink source parent
[–] residentmarchant@lemmy.world 2 points 3 years ago (1 child) 1password does this, too and it's magical. I've had my SMS go to my browser via Google Messages for a while, but it's so much easier to just auto-fill it instead of copy/paste permalink fedilink source parent hideshow 2 child comments replies: [–] isVeryLoud@lemmy.ca 3 points 3 years ago Also, 1password logs you out when you stare at it wrong, so I'm not worried about someone who would somehow get local access abusing it. permalink fedilink source parent
[–] isVeryLoud@lemmy.ca 3 points 3 years ago Also, 1password logs you out when you stare at it wrong, so I'm not worried about someone who would somehow get local access abusing it. permalink fedilink source parent
[–] library_napper@monyet.cc -1 points 3 years ago (2 children) That's bad advice permalink fedilink source parent hideshow 4 child comments replies: [–] subtext@lemmy.world 13 points 3 years ago Is it less secure than it could be? Yes. Is it better than no 2FA? Also yes. In the end if it doesn’t work for your security model, than more power to you. But if it helps to increase the security of the average Joe, it’s good advice. permalink fedilink source parent [–] argv_minus_one@beehaw.org -1 points 3 years ago (1 child) Allowing a smartphone access to anything sensitive is even worse advice. Smartphones are notoriously insecure. permalink fedilink source parent hideshow 2 child comments replies: [–] library_napper@monyet.cc 1 point 3 years ago You're right. Dont grant your smartphone access to your GitHub. Just give it one factor. permalink fedilink source parent
[–] subtext@lemmy.world 13 points 3 years ago Is it less secure than it could be? Yes. Is it better than no 2FA? Also yes. In the end if it doesn’t work for your security model, than more power to you. But if it helps to increase the security of the average Joe, it’s good advice. permalink fedilink source parent
[–] argv_minus_one@beehaw.org -1 points 3 years ago (1 child) Allowing a smartphone access to anything sensitive is even worse advice. Smartphones are notoriously insecure. permalink fedilink source parent hideshow 2 child comments replies: [–] library_napper@monyet.cc 1 point 3 years ago You're right. Dont grant your smartphone access to your GitHub. Just give it one factor. permalink fedilink source parent
[–] library_napper@monyet.cc 1 point 3 years ago You're right. Dont grant your smartphone access to your GitHub. Just give it one factor. permalink fedilink source parent