Comments by "Gilad Barlev" (@GSBarlev) on "Github REQUIRES 2FA: What This Means For You?" video.

  1. Just to add: TOTP is an open spec / algorithm, and there are absolutely desktop authenticators you can compile and run locally.
    2
  2. Been a few weeks, but I gotta say GitHub handled this really well. I've been part of other MFA roll-outs where it wasn't clear when or whether keys or tokens (like those used for automated CI/CD actions) would be affected, and GitHub in contrast made everything transparent, workflow-friendly and, more importantly, logical (no security theater). Credit where due, Microsoft—this was expertly handled.
    1