GitHub now requiring 2FA for all contributors,what authenticator apps you using? GitHub is rolling out mandatory 2FA for accounts that contribute code, with a 45-day window to enroll. Aegis, Raivo, or Ente are the ones that have most promise from what I've read. Any other recommendations? or thoughts on those three in particular. TY |
Bitwarden Authenticator (local) https://bitwarden.com/products/authenticator/
Ente (encrypted cloud backup) https://ente.com/auth/
In a CLI, oath lets you calculate a TOTP.
But it's maybe a bit more insecure if you use the same machine.
Arguing against 2FA is like arguing that they shouldn't bash your password because it means you can't see your password to help remember it.
on work laptop: 1PW
Lose what exactly? Decent 2FA setups make you confirm you've recorded a set of backup codes somewhere (they often recommend print and store in a safe, I find a secure note in a password manager works well) before activating it.
Furthermore plenty of TOTP applications offer secure backup and syncing features.
So again, what specifically do you think you're going to "lose"?
All of the arguments against 2FA here could be made against requiring passwords longer than 8 characters.
It’s not secure. The fix is easy, effective, and has almost no downsides.
You store a TOTP secret on your <device>....
It's less PII than an ssh public key because it's literally just a random string, that *they* generated, and you only need it for the web UI.
So please tell me how the Americans are going to track and identify you through a fucking TOTP secret.