Raising the bar for software security: GitHub 2FA begins March 13
github.blog
external-link
On March 13, we will officially begin rolling out our initiative to require all developers who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Read on to learn about what the process entails and how you can help secure the software supply chain with 2FA.

I personally am fine with this.

I personally am afraid of this. What if something gets botched? I’ll be permanently locked out of my account!

I’d prefer me getting permanently locked out over someone who isnt me getting allowed in. Even more so to services which have my credit card number.

But unlikely anyway, as long as I save my pass and 2fa to a password manager, and keep the backup codes backed up.

@[email protected]
link
fedilink
English
82Y

Print off your recovery codes and keep them safe. If you want to be extra, hammer them into metal plates like the crypto weirdos do.

@[email protected]
link
fedilink
-6
edit-2
2Y

Printing recovery codes would require me to either be price gouged by the printer ink cartel or use someone else’s printer, and using someone else’s printer is begging to get my account stolen.

I have no idea how to hammer things into metal plates, but I’m guessing that’s even more expensive than printer ink.

Just use your pen and paper.

I can do that with alphanumeric codes, yeah, but can I get alphanumeric codes from GitHub, or is it going to be a QR code? I can’t write down a QR code…

@[email protected]
link
fedilink
3
edit-2
2Y

QR codes are just an encoding. Just use any half-competent QR code app, and it will give you it’s content, which you can then write down. For the reverse you can use any QR code generator.

How do I feed the generated QR code back to GitHub, then? Can I upload an image of it?

Have you ever used any website with 2FA? You don’t need to upload QR codes.

I’ve only used SMS and Steam 2FA so far. I’ve been avoiding 2FA as much as I can.

The recovery codes come as a set of numbers

Create a post

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

  • 1 user online
  • 2 users / day
  • 64 users / week
  • 255 users / month
  • 1.56K users / 6 months
  • 1 subscriber
  • 3.43K Posts
  • 45.6K Comments
  • Modlog