GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

The Verge: Two-Factor Authentication is a Mess

While not all two-factor is created equal, The Verge reports that FIDO Authentication is the…

Read More →

Mashable: This smart ring gives you instant mobile payments with beefed up security

The Token smart ring allows wearers to make mobile payments, unlock doors, and, through the…

Read More →

The New York Times: The Tech That Our Security Experts Use to Be Digitally Secure

Security experts from the New York Times explain why they use FIDO security keys for…

Read More →