3 ms·
"knows what they're doing" doesn't have anything to do with it. If you don't have MFA, your account is going to get compromised by one of the billion bots tryin
by alar44 4y ago
"knows what they're doing" doesn't have anything to do with it. If you don't have MFA, your account is going to get compromised by one of the billion bots trying to get it. Tell me you don't understand basic security without telling me you don't understand basic security.
- RealStickman_ 4y agoI have a few accounts I view as valuable enough to enable 2FA on. This change in Github will just lead to me either being more annoyed or storing the TOTP generator code in my password manager.
- selfhoster11 4y agoThat's not how it works. I have strong randomly-generated passwords for most sites, and store them in a password manager that I only ever load on ~3 devices that I completely trust and own. Short of typing the password in on a compromised machine, a "forgot password" reset (via the website or customer support), or being incautious enough to log in via a phishing form, I see no way that my accounts can be compromised. And as I said, for some accounts, there are no consequences if they are compromised.