Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub now requiring 2FA for all contributors,what authenticator apps you using?

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 42 posts

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#31

Post by bjourne »

stephenr wrote: post #30
bjourne wrote: post #29

Earlier quoted context omitted.

Um, no? Arguing against 2fa is I don't want to cede even more PII with the American tech oligopoly which, no doubt, will share said PII with the American regime.

What PII? You store a TOTP secret on your .... It's less PII than an ssh public key because it's literally just a random string, that *they* generated, and you only need it for the web UI. So please tell me how the Americans are going to track and identify you through a fucking TOTP secret.

My phone number dumbo.

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#32

Post by stephenr »

bjourne wrote: post #31
stephenr wrote: post #30

Earlier quoted context omitted.

What PII? You store a TOTP secret on your .... It's less PII than an ssh public key because it's literally just a random string, that *they* generated, and you only need it for the web UI. So please tell me how the Americans are going to track and identify you through a fucking TOTP secret.

My phone number dumbo.

Why would you use a phone number for 2FA. It's like saying you only use md5 hashing for passwords.

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#33

Post by BloondAndDoom »

aerzen wrote: post #22
jc-myths wrote: post #7

Google auth, first and the only 2FA authenticator I ever used.

Because some auth provider recommended it as the only app to use. While it is a good app, it does backup into Drive.

While it’s not a perfect solution, you can export and backup your data with QR codes, so you can back it up without cloud.

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#34

Post by jc-myths »

BloondAndDoom wrote: post #33
aerzen wrote: post #22

Earlier quoted context omitted.

Because some auth provider recommended it as the only app to use. While it is a good app, it does backup into Drive.

While it’s not a perfect solution, you can export and backup your data with QR codes, so you can back it up without cloud.

[dead]

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#35

Post by MeetingsBrowser »

jjgreen wrote: post #23
codazoda wrote: post #16

Earlier quoted context omitted.

Why? You’re against 2FA? You couldn’t contribute without an account before, could you?

I'd had a GH account for ages under my own name, I closed that as soon as Microsoft took it over, moved all my repos to GitLab, good move. I opened a new GH account under a silly name [1] so I could collaborate with people still on it. Now I'm not really against 2FA, but don't use it myself, it adds friction, adds risk (what if you lose it), it seems too "theatrical" for my liking. You want to use 2FA? be my guest, l…

> What I don't like is being told what to do with my account

All of the arguments against 2FA here could be made against requiring passwords longer than 8 characters.

It’s not secure. The fix is easy, effective, and has almost no downsides.

Re: GitHub now requiring 2FA for all contributors,what authenticator apps you using?

#39

Post by 6272connect »

Aegis is a solid choice for local 2FA, especially if you're looking for something actively maintained that doesn't rely on cloud sync. Several comments like uyzstvqs and gethly point this out, and I've seen it perform well in practice. For the absolute highest security tiers, though, consider moving towards hardware keys. While it adds a bit more friction than an app, the security posture is far superior for critical accounts.
Post reply on HN