General > General Technical Chat

Stupid Microsoft enforcing 2FA in GitHub

(1/2) > >>

DavidAlfa:
It's ok to add the option, but let people decide the security they need, a really huge percentaje of accounts are doing nothing important.

But enforcing it is plain stupid, by no way I'm adding more personal information to be leaked for 1849192th time, a later "Sorry we got a breach" email won't fix it!

It'll backfire at them, people is flying to gitlab, I see them removing the "feature" in no time...

SiliconWizard:
Yeah I understand the frustration, but 2FA is going to become prevalent I guess.
You actually don't need to give more personal info. I have bought a couple keys a few months ago and set them up with a few accounts, including one of my bank accounts.

For github, I didn't need to provide more personal info than they already had before.
I used TOTPs with 2FAS: https://2fas.com/
This way you don't need to give them your phone number or anything like that.

Halcyon:
The issue of accounts getting breached isn't just an issue for the account holder but for the business as well.

The less accounts are compromised, the more reliable the product becomes. You wouldn't be too interested if the place was just full of malware and garbage due to stolen accounts.

Shonky:
Just use TOTP. No extra info given away. Don't use "muh privacy" as a lame reason.

As for them reverting the change, won't happen. And people won't be flying to Gitlab because of it.

It's hardly an imposition but it seems there's always someone who'll whinge. This is not even the first thread here about this Github change either. The whinge level for stuff like this is certainly higher here.

https://www.eevblog.com/forum/chat/how-to-bypass-githubs-new-enable-two-factor-authentication
https://www.eevblog.com/forum/programming/github-starts-enforcing-2fa

DimitriP:
I would buy into 2FA if all them "security folk" were smart enough to figure out that since the computer , browser and ISP that I've used the last few hunded times I logged in is still the same, it's me.
Perhaps 2FA can detect that there is no knife on your throat too.

For security reasons  and your protection this message will be deleted in 24 hours.   :-DD







Navigation

[0] Message Index

[#] Next page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod