mjgardner, 1 month ago

@ChristosArgyrop What does #2FA (inherently) have to do with (I’m assuming) #git?

A #Subversion or #CVS server could impose 2FA as well depending on what’s handling authentication.

ChristosArgyrop, 1 month ago

@mjgardner I have 20 different logins that require 2FA and I don't need another one in my life 🤣

mjgardner, 1 month ago

@ChristosArgyrop Only 20? Amateur. 🙄

% bw list items | jq '. | map(select(.login.totp)) | length'  
111  

(bw is the #Bitwarden #PasswordManager CLI: https://bitwarden.com/help/cli)

ChristosArgyrop, 1 month ago

@mjgardner one of them will log you because of inactivity after 5min (Clinical system). My favorite activity in the day is to see if I can type the entire token over 1 to 2 sec before it changes agaib.

mjgardner, 1 month ago

@ChristosArgyrop That shouldn’t be laid at git’s feet. That’s an issue to take up with your clinical system’s admin.

ChristosArgyrop, 1 month ago

@mjgardner I am just trying to reduce preventable 2FA exposures at this point in time, because the clinical systems or the federal systems (I have a couple of those as well) are non negotiable. My favorite in the latter category is a 25 character password that can't be the same as the other 25 ones while having a 2FA.

mjgardner, 1 month ago (edited 1 month ago)

@ChristosArgyrop Until those systems start using #passkeys instead of #passwords and #2FA, I'm afraid you're stuck.

For now, keep safe your 2FA/#TOTP seeds (the QR code or string you add to an authenticator app). As you saw in https://social.sdf.org/@mjgardner/112287092545124096 I favor #Bitwarden but there are other options depending on your use cases.