GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

ITU: Time to eliminate the password: New report on next-generation authentication for digital financial services

FIDO specifications enable users to authenticate locally to their device using biometrics in a model…

Read More →

ComputerWeekly: Data protection practices still poor, survey shows

FIDO Alliance CMO Andrew Shikiar tells ComputerWeekly that the vast majority of breaches are caused…

Read More →

ComputerWeekly: Time to deploy strong authentication, says FIDO

In this ComputerWeekly story, FIDO Alliance CMO Andrew Shikiar explains that with the tools required…

Read More →