3 ms·

So now I can't use git client on github repos anymore without carrying a device that has some impossible to memorize key or token on it? I hate it. I don't car

So now I can't use git client on github repos anymore without carrying a device that has some impossible to memorize key or token on it? I hate it. I don't care much for the slight chance that someone gets into my github account. I care a lot more that now I have to jump hoops to get into my account myself. There's more to things than security.

WorldMaker 5y ago
You can use Access Tokens which are "application specific" passwords instead of SSH keys. You can use a git credential manager such as GCM Core (https://github.com/microsoft/Git-Credential-Manager-Core https://github.com/microsoft/Git-Credential-Manager-Core) to automate the flow from username/password to access token. (It pops up a browser window where you login, retrieves and access token for you.)
- jampekka 5y ago
  Sounds a lot like a hoop. With password I can use any device with git installed to pull and push from/to github repos. Now I'd need a hack like this on top. I prefer less tools to more tools. Probably a losing battle given how the field is developing.
  - WorldMaker 5y ago
    GCM Core is installed out of the box with official git installer on Windows. Several Linux distributions at this point include it as well. On macOS it is a simple brew install away. git itself was built as an agglomeration of multiple tools bundled together and GCM Core is right on the borderline of a tool always included in the git distribution anyway on some platforms and needs to be installed on others. It's likely to always be in that "weird border space" because it requires a web browser and there isn't a pure command line equivalent.
    - jampekka 5y ago
      So if I SSH into a machine, no management for me. And it doesn't seem to be in APT at least in Debian unstable. And even if it is, it is still another tool, subject to breakage and with heavy dependencies. Also not very eager to install some .NET runtime just to have some hack to pop up a browser. Sorry, but I still hate it. I want less software, not more.
scintill76 5y ago
I suppose someone could make an SSH key generator/agent that derives the key from a user-selectable passphrase. Probably nobody would package it as conveniently as using a password with standard git was, though.

WorldMaker 5y ago

You can use Access Tokens which are "application specific" passwords instead of SSH keys. You can use a git credential manager such as GCM Core (https://github.com/microsoft/Git-Credential-Manager-Core https://github.com/microsoft/Git-Credential-Manager-Core) to automate the flow from username/password to access token. (It pops up a browser window where you login, retrieves and access token for you.)

jampekka 5y ago
Sounds a lot like a hoop. With password I can use any device with git installed to pull and push from/to github repos. Now I'd need a hack like this on top. I prefer less tools to more tools. Probably a losing battle given how the field is developing.
- WorldMaker 5y ago
  GCM Core is installed out of the box with official git installer on Windows. Several Linux distributions at this point include it as well. On macOS it is a simple brew install away. git itself was built as an agglomeration of multiple tools bundled together and GCM Core is right on the borderline of a tool always included in the git distribution anyway on some platforms and needs to be installed on others. It's likely to always be in that "weird border space" because it requires a web browser and there isn't a pure command line equivalent.
  - jampekka 5y ago
    So if I SSH into a machine, no management for me. And it doesn't seem to be in APT at least in Debian unstable. And even if it is, it is still another tool, subject to breakage and with heavy dependencies. Also not very eager to install some .NET runtime just to have some hack to pop up a browser. Sorry, but I still hate it. I want less software, not more.

scintill76 5y ago

I suppose someone could make an SSH key generator/agent that derives the key from a user-selectable passphrase. Probably nobody would package it as conveniently as using a password with standard git was, though.