Just wondering what people are using to meet the 2FA requirement GitHub has been rolling out. I don't love the idea of having an authenticator app installed on my phone just to log into GitHub. And really don't want to give them my phone number just to log in.

Last year, we announced our commitment to require all developers who contribute code on GitHub.com to enable two-factor authentication (2FA)...

(page 2) 50 comments

sorted by: hot top controversial new old

[–] WormFood@lemmy.world 3 points 1 month ago

last time I signed into my Microsoft 365 account for work I got two separate 2fa prompts and two captchas, it was like being in an episode of the crystal maze. the mere act of signing into something is now tedious and difficult

[–] Deckweiss@lemmy.world 3 points 1 month ago* (last edited 1 month ago)

I deleted my github account because fuck microsoft. Open source should not be hosted on their servers.

In regards to forced 2fa, as I don't need it on my projects, there would be literally nothing lost if somebody gets into my account.

Just for the convenience I moved them to my selfhosted forgejo and mirroring to sr.ht as a backup.

[–] isVeryLoud@lemmy.ca 2 points 3 weeks ago

ITT: People who think they know better than security researchers

[–] flumph@programming.dev 2 points 1 month ago

2FAS is open source and doesn't have a cloud presence to store data. You can use it to add 2FA to your other services as well.

load more comments