Open Source

29882 readers

551 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

How is everyone handling the 2FA requirement for GitHub? (docs.github.com)

submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]

127 comments fedilink hide all child comments

Just wondering what people are using to meet the 2FA requirement GitHub has been rolling out. I don't love the idea of having an authenticator app installed on my phone just to log into GitHub. And really don't want to give them my phone number just to log in.

Last year, we announced our commitment to require all developers who contribute code on GitHub.com to enable two-factor authentication (2FA)...

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 2 months ago (13 children)

I have a dedicated phone with a dedicated number which stays at home all the time. Call it (see what I did there) the Authenticator phone, which only job is to authenticate me when needed. Not only for Github, but other services too. Minimizing the risk to lose or break the device. And companies don't get all my private stuff.

[–] [email protected] 2 points 2 months ago (1 children)

That's exactly what I'm planning to do, a phone that forwards all sms messages through ntfy (or other service like signal) to me.

[–] [email protected] 3 points 2 months ago (2 children)

@chevy9294 @thingsiplay

On android you can use https://f-droid.org/en/packages/org.projectmaxs.module.smsnotify/ - forwards incoming sms to XMPP

[–] [email protected] 3 points 2 months ago

Thanks but I'll be running postmarketOS and make sms forwarder myself.

[–] [email protected] 3 points 2 months ago

Interesting software. Never heard about this. This is not really for me as I don't do SMS authentification or SMS in general or use that phone at all, other then authenticate myself from time to time. I wonder how this differs from software like KDEConnect in its practically (not in the technical implementation differences).

load more comments (11 replies)