GitHub to require 2FA on accounts by October 6, 2023

Xylight (Photon dev)@lemmy.xylight.dev to Technology@lemmy.ml – 395 points –
Raising the bar for software security: GitHub 2FA begins March 13
github.blog

I personally am fine with this.

124

You are viewing a single comment

Anyone who claims they're doing OTPs over SMS for "security" ia lying to you. Discord wants your phone number; it has nothing to do with your security

there's quite a lot of services that want phone for verification/2fa/whatever. whenever I run into them I usually just refuse to use the service altogether.

How do you even use the internet? I mean, you could never book a flight, use any food rewards program, book a ride share, etc. Almost everything uses my phone number for 2FA.

There is literally no bank in my country that doesn't use sms for 2fa.

what happens if you don't have a phone number? you're just prevented from having a bank account?

You can have a bank account, but you wouldn't be able to do online or mobile banking.

Sms is the only 2fa option (some offer email as well, but last I checked all fall back on sms), and it's mandatory for online/mobile.

1 more...
1 more...
1 more...