3 ms·

The only place I log into from the VM is Github, protected by 2FA in case any malware gets my password.

• ylk 4y ago
  The malware will just take the session cookie. Some actions still require 2FA approval, but it’s not many, iirc.
• remram 4y ago
  So the malware can delete all your projects or inject malware into them, but thankfully it won't be able to log in again later?