User avatar
Steve Streza @stevestreza@indieweb.social
1y
There is nothing that makes me want to delete my GitHub account more than getting mandatory security features being forced on because I'm in a "software supply chain" for ancient open source code nobody uses. github.blog/news-insights/product-news/raising-the-bar-for-software-security-github-2fa-begins-march-13/
GitHub is central to the software supply chain, and securing the software supply chain starts with the developer. Our 2FA initiative is part of a platform-wide effort to secure software development by improving account security. Developers’ accounts are frequent targets for social engineering and account takeover (ATO). Protecting developers and consumers of the open source ecosystem from these types of attacks is the first and most critical step toward securing the supply chain.
1
1
0
0
User avatar
Océane @oceane@peculiar.florist
1y
@stevestreza This is ridiculous. Companies should audit the source code they're using. Shame on Microsoft for reversing the blame on software hobbyists.
0
1
0
0