GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

ZDNet: Apple killing off web passwords? Safari trials WebAuthn logins on macOS

Apple’s WebKit team has added support for FIDO Security Keys and WebAuthn to reduce the…

Read More →

RSA Blog: 7 security trends to watch in the new year

This RSA blog predicts that FIDO2 will continue to gain adherents in 2019, marked by…

Read More →

ARS Technica: Thousands of sensitive emails stolen in intrusion of Republican campaign arm

In response to the email hack on the National Republican congressional Committee, this article by…

Read More →