Hacker News new | past | comments | ask | show | jobs | submit login

I visited 1password website and seems like this is not just an app but a paid service which requires some account which means more learning some proprietary software and even more spam in my email. Why there is no option for Github to get rid of any 2-factor for me? I have not any finished project, my name means nothing for the community.



>which means more learning some proprietary software and even more spam in my email.

Can always quite software and become a farmer or something...

People proposed it as a solution to the OTP for "need mobile phone to use GH" thing. It's one solution, there are others.

>Why there is no option for Github to get rid of any 2-factor for me? I have not any finished project, my name means nothing for the community.

Because they don't make it for you, but for everybody. And security is important for others too. If your account gets pwned, it can be used to spread malware, or to facilitate shady behavior that can't be tracked to the real culprits.

If there was such an option, people would disable it without knowing the risks for "convenience", and then cry and blame GH when their accounts are taken.


There are tons of open source & free local OTP applications.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: