EPISODE · Jul 18, 2022 · 39 MIN
Episode 332 - PyPI: 2FA or not 2FA, that is the question
from Open Source Security
Josh and Kurt talk about PyPI mandating two factor authentication for the top 1% of projects. It feels like a simple idea, but it's not when you start to think about it. What problems does 2FA solve? How common are these attacks? What are the second and third order effects of mandating 2FA? This episode should have something for everyone on all sides of this discussion to violently disagree with. Show Notes PyPI announcement NPM expired domains Morten Linderud Tweet Congratulations: We Now Have Opinions on Your Open Source Contributions
NOW PLAYING
Episode 332 - PyPI: 2FA or not 2FA, that is the question
No transcript for this episode yet
Similar Episodes
Feb 18, 2026 ·26m
Jul 24, 2025 ·73m
Nov 3, 2024 ·52m
Sep 26, 2024 ·67m
Sep 16, 2024 ·139m
Aug 14, 2024 ·76m