GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.
MORE FIDO in the News
Informatik aktuell: FIDO Passkeys 2 – in the future without a password
The FIDO Alliance is committed to making the Internet and...9월 15, 2023
TechRadar: BitWarden adds passwordless SSO
Bitwarden has now added Single Sign-On (SSO) support for trusted...
Smashing Security: 339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?
Podcast episode where FIDO Passkeys are mentioned and linked to.