[Matplotlib-devel] 2FA on github

[tcaswell]

Folks,

We are now able to enroll in github's sponsor ship program [1] and have the donations go straight to our account with NumFOCUS!  However the catch is that in order to configure it we must make 2FA [2] required for membership in the Matplotlib organization.  Currently about 50% of us do not have it set up.  

The status-quo is that the "sponsor" button directs people to https://github.com/sponsors/numfocus .  Any money donated that way goes to the NF general account, but it is not earmarked specifically for us.

I am inclined to enable required 2FA (I was thinking about trying to do this anyway) but would like to open the floor to any concerns.  If you have concerns that you don't feel comfortable discussing on the mailing list please email me directly.

I would like to aim to flip the switch (which will remove everyone without 2FA form the org!) in 4 weeks.

Tom

ps: I personally use a yubikey and love it

[1] https://github.com/sponsors

[2] https://help.github.com/en/github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa

--

_______________________________________________
Matplotlib-devel mailing list
[hidden email]
https://mail.python.org/mailman/listinfo/matplotlib-devel

[Ryan May-3]

Hi,

That's a +1 from me. It's only rarely a pain when I'm trying to use GitHub from a new or someone else's computer. I rarely do anything with git that isn't over SSH and using SSH keys, so I'm almost never using my 2FA to do git stuff. 

The Google Authenticator and LastPass Authenticator apps work well in my experience--and they're free.

Ryan

On Tue, Apr 14, 2020 at 1:59 PM Thomas Caswell <[hidden email]> wrote:

Folks,

We are now able to enroll in github's sponsor ship program [1] and have the donations go straight to our account with NumFOCUS!  However the catch is that in order to configure it we must make 2FA [2] required for membership in the Matplotlib organization.  Currently about 50% of us do not have it set up.  

The status-quo is that the "sponsor" button directs people to https://github.com/sponsors/numfocus .  Any money donated that way goes to the NF general account, but it is not earmarked specifically for us.

I am inclined to enable required 2FA (I was thinking about trying to do this anyway) but would like to open the floor to any concerns.  If you have concerns that you don't feel comfortable discussing on the mailing list please email me directly.

I would like to aim to flip the switch (which will remove everyone without 2FA form the org!) in 4 weeks.

Tom

ps: I personally use a yubikey and love it

[1] https://github.com/sponsors

[2] https://help.github.com/en/github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa

--

Thomas Caswell
[hidden email]

_______________________________________________
Matplotlib-devel mailing list
[hidden email]
https://mail.python.org/mailman/listinfo/matplotlib-devel

--

_______________________________________________
Matplotlib-devel mailing list
[hidden email]
https://mail.python.org/mailman/listinfo/matplotlib-devel

[Eric Firing]

OK with me.  I'm using LastPass Authenticator.

Eric

On 2020/04/14 9:59 AM, Thomas Caswell wrote:

> Folks,
>
> We are now able to enroll in github's sponsor ship program [1] and have
> the donations go straight to our account with NumFOCUS!  However the
> catch is that in order to configure it we must make 2FA [2] required for
> membership in the Matplotlib organization.  Currently about 50% of us do
> not have it set up.
>
> The status-quo is that the "sponsor" button directs people to
> https://github.com/sponsors/numfocus .  Any money donated that way goes
> to the NF general account, but it is not earmarked specifically for us.
>
> I am inclined to enable required 2FA (I was thinking about trying to do
> this anyway) but would like to open the floor to any concerns.  If you
> have concerns that you don't feel comfortable discussing on the mailing
> list please email me directly.
>
> I would like to aim to flip the switch (which will remove everyone
> without 2FA form the org!) in 4 weeks.
>
> Tom
>
> ps: I personally use a yubikey and love it
>
> [1] https://github.com/sponsors
> [2]
> https://help.github.com/en/github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa
>
> --
> Thomas Caswell
> [hidden email] <mailto:[hidden email]>
>
> _______________________________________________
> Matplotlib-devel mailing list
> [hidden email]
> https://mail.python.org/mailman/listinfo/matplotlib-devel
>

_______________________________________________
Matplotlib-devel mailing list
[hidden email]
https://mail.python.org/mailman/listinfo/matplotlib-devel