GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

Dark Reading: FIDO Alliance Appoints Facebook to Board of Directors

Facebook has joined Google, Microsoft, Amazon, Intel and other major influential tech companies to back…

Read More →

Spark, CBC Radio: Forget the password. No, really! They’re about to become obsolete

FIDO Executive Director Brett McDowell tells radio host Nora Young how WebAuthn is bringing simpler,…

Read More →

The Canadian Press: Death of the password? New web standard trades passcodes for biometrics

The Canadian Press reports that experts are “excited about the prospect of making logins “unphishable””…

Read More →