<div dir="ltr">+1, but I already have it enabled. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 26, 2018 at 3:53 PM, David Davis <span dir="ltr"><<a href="mailto:daviddavis@redhat.com" target="_blank">daviddavis@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I got a notification from another organization I am a member of on Github[0] that they are going to require Two Factor Authentication[1] in response to recent news about some malicious code being shipped in a compromised npm package[2]. <div><br></div><div>We are vulnerable to having malicious code deployed to PyPI if one of our Github accounts is compromised. Thus, I wonder if we should also require that people with a commit bit have Two Factor Authentication enabled.<div><br></div><div>Thoughts?<br><div><br></div><div>[0] <a href="https://community.theforeman.org/t/require-2fa-for-github-organization-members/10404" target="_blank">https://community.<wbr>theforeman.org/t/require-2fa-<wbr>for-github-organization-<wbr>members/10404</a><br clear="all"><div><div dir="ltr" class="m_-8136455174575536232gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>[1] <a href="https://help.github.com/articles/requiring-two-factor-authentication-in-your-organization/" target="_blank">https://help.github.com/<wbr>articles/requiring-two-factor-<wbr>authentication-in-your-<wbr>organization/</a></div><div>[2] <a href="https://www.theregister.co.uk/2018/07/12/npm_eslint/" target="_blank">https://www.theregister.<wbr>co.uk/2018/07/12/npm_eslint/</a></div><span class="HOEnZb"><font color="#888888"><div><br></div><div>David<br></div></font></span></div></div></div></div></div></div></div></div></div></div></div>
<br>______________________________<wbr>_________________<br>
Pulp-dev mailing list<br>
<a href="mailto:Pulp-dev@redhat.com">Pulp-dev@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/pulp-dev" rel="noreferrer" target="_blank">https://www.redhat.com/<wbr>mailman/listinfo/pulp-dev</a><br>
<br></blockquote></div><br></div>