4 ms·

Just so I'm understanding correctly, the "uncompensated burden" you're referring to is that someone has to activate 2FA?

• raverbashing 3y ago
  For real, if a developer really feels like 2FA is a pain I can only imagine how quirky (in a bad way) their code should be
  • trqs 3y ago
    [flagged]
• itronitron 3y ago
  Many people associate 2FA with being asked for a phone number, which makes it a burden.
  • andybak 3y ago
    > Many people associate I presume package authors are likely to be rather better informed than this?
  • arcanemachiner 3y ago
    I had to double check to make sure PyPI isn't implementing phone-number based 2FA. I then breathed a sigh of relief. https://nakedsecurity.sophos.com/2017/07/11/two-factor-via-your-mobile-phone-should-you-stop-using-it/ https://nakedsecurity.sophos.com/2017/07/11/two-factor-via-y...
    • itronitron 3y ago
      That article/advert you cite makes no reference to PyPI, so I'm not sure what your point is.
      • deleted 3y ago
        [deleted]
      • arcanemachiner 3y ago
        You brought up phone-based 2FA in relation to phone numbers. I added some context on why the two make an awful pair.
        • itronitron 3y ago
          Ah, thanks.