3 ms·

> the person that had 2FA for your organisation’s github admin account Why doesn't your organisation have at least two people with the Owner role? > Also phon

> the person that had 2FA for your organisation’s github admin account Why doesn't your organisation have at least two people with the Owner role? > Also phones don’t seem to think it’s important to backup 2FA secrets I've been using a TOTP app with backup functionality since at least 2014, so its not exactly a new concept. If you choose not to avail yourself of one, that's on you.

grayhatter 3y ago
>Why doesn't your organisation have at least two people with the Owner role? It's simple, just never make any mistakes. > I've been using a TOTP app with backup functionality since at least 2014, so its not exactly a new concept. If you choose not to avail yourself of one, that's on you. You're right! how dare they not know everything that you know.... it's insane that someone might not do everything exactly the way you think it should be done! I get that's not what you're trying to say, but all you're doing is blaming humans for ignorance, or making mistakes. I'd assert, that given you clearly understand both security, and best practices, you'd be better equipped to help offer solutions instead of accusations, or blame.
- stephenr 3y ago
  No, I'm blaming humans for wilful ignorance and insisting that there is no solution to problems they haven't tried to solve.
  - russelg 3y ago
    Most people don't recognise the importance of backups until they need said backups.
    - stephenr 3y ago
      Most people don't deny the existence of backup software once they realise they need it.
mattl 3y ago
Google Authenticator didn't support backups until very recently which was surprising and caused some problems for friends of mine.
- stephenr 3y ago
  So? It's not like Google authenticator is the only TOTP client available. I really do have to wonder about the people who realised it's a problem to have no easy to use backup, but then apparently spent exactly zero minutes to try and find a solution.
  - mattl 3y ago
    A lot of things suggested Google Authenticator, so a lot of people installed it and used it, which sucks because no backups, so a lot of people had problems.
  - oskarw85 3y ago
    Hey Mr. Know-it-all There WILL be a situation where you know nothing. Maybe your refrigerator would die and the technician would be scheduled two weeks from now. You would write about it on HN and some asshole would write: So? It's not like shitty Samsung refrigerators is the only one model available. I really do have to wonder about people who choose refrigerators using R407c refrigerant where temperature glide causes compressor valves to wear out prematurely. People apparently spent exactly zero minutes to try and find a solution.
    - stephenr 3y ago
      I mean this is just a terrible analogy to start with. I guarantee you it's a lot quicker, easier and cheaper to change your TOTP authenticator than it is to change a fucking fridge. You clearly didn't understand the point I'm making so let me be more explicit: I don't expect people to know everything. As you allude to, it's impossible to know everything. What I do expect, is for people to learn and try to resolve problems they face, rather than just sticking their head in the sand and pretending there's nothing they can do. A more accurate analogy using your fridge example would be: Johnny buys a POS Samsung fridge. Unknown to Johnny, Samsung fridges use R407c refrigerant which causes the compressor valves to wear out prematurely. The compressor on his fridge needs to be replaced after just 3 years of use. Rather than asking others for advice on the issue, Johnny now tells anyone that will listen, that all fridges will all need their compressor replaced after 3 years. That's what's happening in this thread: zero requests for information or help about the issue; multiple posts claiming things that are factually incorrect, with absolute confidence.

grayhatter 3y ago

>Why doesn't your organisation have at least two people with the Owner role? It's simple, just never make any mistakes. > I've been using a TOTP app with backup functionality since at least 2014, so its not exactly a new concept. If you choose not to avail yourself of one, that's on you. You're right! how dare they not know everything that you know.... it's insane that someone might not do everything exactly the way you think it should be done! I get that's not what you're trying to say, but all you're doing is blaming humans for ignorance, or making mistakes. I'd assert, that given you clearly understand both security, and best practices, you'd be better equipped to help offer solutions instead of accusations, or blame.

stephenr 3y ago
No, I'm blaming humans for wilful ignorance and insisting that there is no solution to problems they haven't tried to solve.
- russelg 3y ago
  Most people don't recognise the importance of backups until they need said backups.
  - stephenr 3y ago
    Most people don't deny the existence of backup software once they realise they need it.

mattl 3y ago

Google Authenticator didn't support backups until very recently which was surprising and caused some problems for friends of mine.

stephenr 3y ago
So? It's not like Google authenticator is the only TOTP client available. I really do have to wonder about the people who realised it's a problem to have no easy to use backup, but then apparently spent exactly zero minutes to try and find a solution.
- mattl 3y ago
  A lot of things suggested Google Authenticator, so a lot of people installed it and used it, which sucks because no backups, so a lot of people had problems.
- oskarw85 3y ago
  Hey Mr. Know-it-all There WILL be a situation where you know nothing. Maybe your refrigerator would die and the technician would be scheduled two weeks from now. You would write about it on HN and some asshole would write: So? It's not like shitty Samsung refrigerators is the only one model available. I really do have to wonder about people who choose refrigerators using R407c refrigerant where temperature glide causes compressor valves to wear out prematurely. People apparently spent exactly zero minutes to try and find a solution.
  - stephenr 3y ago
    I mean this is just a terrible analogy to start with. I guarantee you it's a lot quicker, easier and cheaper to change your TOTP authenticator than it is to change a fucking fridge. You clearly didn't understand the point I'm making so let me be more explicit: I don't expect people to know everything. As you allude to, it's impossible to know everything. What I do expect, is for people to learn and try to resolve problems they face, rather than just sticking their head in the sand and pretending there's nothing they can do. A more accurate analogy using your fridge example would be: Johnny buys a POS Samsung fridge. Unknown to Johnny, Samsung fridges use R407c refrigerant which causes the compressor valves to wear out prematurely. The compressor on his fridge needs to be replaced after just 3 years of use. Rather than asking others for advice on the issue, Johnny now tells anyone that will listen, that all fridges will all need their compressor replaced after 3 years. That's what's happening in this thread: zero requests for information or help about the issue; multiple posts claiming things that are factually incorrect, with absolute confidence.