Sign up to save your podcasts
Or
Share Episode 332 - PyPI: 2FA or not 2FA, that is the question
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 332 - PyPI: 2FA or not 2FA, that is the question
Josh and Kurt talk about PyPI mandating two factor authentication for the top 1% of projects. It feels like a simple idea, but it's not when you start to think about it. What problems does 2FA solve? How common are these attacks? What are the second and third order effects of mandating 2FA? This episode should have something for everyone on all sides of this discussion to violently disagree with.
Show Notes- PyPI announcement
- NPM expired domains
- Morten Linderud Tweet
- Congratulations: We Now Have Opinions on Your Open Source Contributions
View all episodes
By Josh Bressers
4.6
4141 ratings
Josh and Kurt talk about PyPI mandating two factor authentication for the top 1% of projects. It feels like a simple idea, but it's not when you start to think about it. What problems does 2FA solve? How common are these attacks? What are the second and third order effects of mandating 2FA? This episode should have something for everyone on all sides of this discussion to violently disagree with.
Show Notes- PyPI announcement
- NPM expired domains
- Morten Linderud Tweet
- Congratulations: We Now Have Opinions on Your Open Source Contributions
More shows like Open Source Security
View all
Risky Business
362 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
634 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
368 Listeners
LINUX Unplugged
263 Listeners
Hacked
176 Listeners
CyberWire Daily
1,011 Listeners
Late Night Linux
154 Listeners
Smashing Security
312 Listeners
Click Here
386 Listeners
CISO Series Podcast
182 Listeners
Hacking Humans
308 Listeners
Defense in Depth
71 Listeners
Self-Hosted
135 Listeners
2.5 Admins
89 Listeners
Risky Bulletin
33 Listeners