GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

Finance Digest: Getting Authentication Right – A Challenge For The Financial Sector

In this article, FIDO Alliance Executive Director Brett McDowell explains why financial services firms need…

Read More →

MakeUseOf: It’s Time to Stop Using SMS and 2FA Apps for Two-Factor Authentication

In this article, MakeUseOf explains why a physical FIDO U2F security key is more secure…

Read More →

Computerworld: What is Windows Hello? Microsoft’s biometrics security system explained

Anoosh Saboori, senior program manager lead at Microsoft tells Computerworld that Windows Hello lets a…

Read More →