4 ms·

I despise 2FA with a passion. Such a PITA. I already use separate, unique, long, random passwords for every site. And I don't even keep them on my phone, just o

• capableweb 4y ago
  If you already have unique, long, random passwords, I'm guessing you're using a password manager? Why not use the password manager for the 2FA as well? Obviously, if your password manager gets broken into, you're fucked. But if the site only have the issue of exposing passwords, you'll be safe.
  • notfed 4y ago
    > Why not use the password manager for the 2FA as well? Why suggest an extra step to them if they're claiming it's unnecessary? Can you at least try to explain why you think it adds value?
    • capableweb 4y ago
      > Can you at least try to explain why you think it adds value? I thought I already did? "But if the site only have the issue of exposing passwords, you'll be safe." is not clear enough?
  • lapcat 4y ago
    > I'm guessing you're using a password manager? Why not use the password manager for the 2FA as well? Mostly the built-in Mac keychain, stored locally, no iCloud.
    • aldarisbm 4y ago
      are you backing up your keychain? or are you okay with losing all passwords if your computer faults.
      • lapcat 4y ago
        > are you backing up your keychain? Of course. I have encrypted offsite backups, as one should. Doesn't everyone?
• tekla 4y ago
  You know for a fact that your passwords are kept actually securely?
• waboremo 4y ago
  They're a PITA for a reason, security isn't convenient.
  • lapcat 4y ago
    Inconvenience isn't security, and no, security doesn't need to be a PITA.
• azalemeth 4y ago
  This seems a lot like a Microsoft-ism. It's being thrust down your throat and continually seems to be part of an effort to make their lives easier at our inconvenience.
• lsferreira42 4y ago
  Maybe you should host it yourself, this is not for the hardcore average HN user, it's for the public, the students that still use weak passwords ( sometimes the same on many websites ), people still trying to learn things, if this makes 90% of the accounts secure then it's a success !
  • lapcat 4y ago
    No, that's not it at all. Github's blog post is clear that it only applies to developers "who contribute code", and the point of this is "securing the supply chain". So yes, this is for the hardcore user and not for the students and people still trying to learn things. The latter are not part of the supply chain.
    • lsferreira42 4y ago
      "developers who contribute code" is anyone who push's things right? So basically every github user