3 ms·
This isn't the first time I've heard such a complaint. So, dumping hours upon hours of work into publishing a project on PyPI is fine, but setting up TOTP is w
by arcanemachiner 3y ago
This isn't the first time I've heard such a complaint.
So, dumping hours upon hours of work into publishing a project on PyPI is fine, but setting up TOTP is where some people draw the line? To prevent against a commonly-exploited attack vector that is so simple to mitigate?
Like... Really?
- teaearlgraycold 3y agoI doubt this person has any public packages on any repository
- arp242 3y agoThe difference is that one type of work is something you do of your own choosing, and the other type of work is enforced and you have no control over it. Not offering an opinion on whether it's good or bad that it's enforced, but that's the difference between the two.