61–70 of 90 posts
A quick off topic question related to 2FA. If an employee is required to complete the 2FA to access to the company's system, is the company responsible to provide the employee a necessary device (either phone or hardware token) to complete the 2FA?
What happens when my phone is eventually stolen? I must now depend on the goodwill of morose carriers?
I despise 2FA with a passion. Such a PITA. I already use separate, unique, long, random passwords for every site. And I don't even keep them on my phone, just on my desktop. Maybe I should just self-host my few little open source projects...
I despise 2FA with a passion. Such a PITA. I already use separate, unique, long, random passwords for every site. And I don't even keep them on my phone, just on my desktop. Maybe I should just self-host my few little open source projects...
They're a PITA for a reason, security isn't convenient.
GitHub is also one of the few big sites that support Passkeys for 2FA. You can use your Trusted Platform Module, Yubikey, or any Secure Enclave equipped Mac to 2FA.
Earlier quoted context omitted.
We are factoring this into our "should we buy company iPhones for all employees?" conversation right now.
There are much better alternatives than buying a smartphone if all you want to provide is a 2FA device. Yubikey is one alternative, as a consumer you can buy it for ~50 EUR but I'm sure if you buy 100+ for employees, you can get some sort of deal with them.
Earlier quoted context omitted.
Legally. In my opinion, if something is required for a worker to finish the job, the employer is obligated to provide it for free. I could be wrong. Curious to know other people's thought.
Legally you would be wrong. See the entire food delivery industry
> Enroll second factors. Having more accessible 2FA methods is important to ensure that you always have access to your account. You can now have both an authenticator app (TOTP) and an SMS number registered on your account at the same time. While we recommend using security keys and your TOTP app over SMS, allowing both at the same time helps reduce account lock out by providing another accessible, understandable 2FA…
The average phone insurance where I live costs a 20% premium per annum relative to the value of the device due to the frequency phones are stolen. What happens when my phone is eventually stolen? I must now depend on the goodwill of morose carriers?
I say this as someone with intentions to leave GitHub, but that has more to do with them ruining nixpkgs contribution history by MAKING ENTIRE ISSUES AND PULL REQUESTS UNVIEWABLE because a single banned user participated in them years ago. Love you GitHub, brilliant.