GitHub Community
GitHub 2FA violates the American Disability Act #68928
-
Select Topic AreaQuestion BodyGitHub 2FA violates the American Disability Act as there appears to be no simple automatic way for a disabled person who can not use or has no phone to use 2FA. If there is a simple way - what is it ? |
Beta Was this translation helpful? Give feedback.
Replies: 16 comments 24 replies
-
|
Well, the good news is there are also desktop apps such as KeePassXC out there. Maybe one of those would be a good fit. You might also get some value out of GitHub's 2FA FAQ. |
Beta Was this translation helpful? Give feedback.
-
and the house came tumbling down.
|
Beta Was this translation helpful? Give feedback.
-
|
To be penultimately clear, I haven't had ANY trouble using authentication apps. My apparent problem is with and only with GH's sucky RE-onboarding of existing users like they're nothing more a jar of pests such as botfly maggots. But I will chase down the 2FA engines to see if any of them can actually read the tld-uri of sites we're attempting to log into, without upsetting GH's Inquisition. |
Beta Was this translation helpful? Give feedback.
-
|
I looked at KeePassXC just how does that help ? It appears to be a simple password manager. |
Beta Was this translation helpful? Give feedback.
-
|
Yeah, it is, but I do believe there might be extensions that add TOTP (authenticator app) functionality to it. I haven't looked into it, though. Cloud-based password managers such as 1Password and Bitwarden also support TOTP but are paid. I'd also advise setting up 2FA for a cloud-based password vault if you do use the TOTP feature. |
Beta Was this translation helpful? Give feedback.
-
|
KeePassXC is pretty simple once you get it set-up. Here is a Good Tutorial for using KeePassXC as your Authenticator App: KeePassXC Tutorial |
Beta Was this translation helpful? Give feedback.
-
|
You gloss over a step as if it's trivial: to install, which it's not.
```fetch https://dl-cdn.alpinelinux.org/alpine/v3.16/main/x86/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.16/community/x86/APKINDEX.tar.gz
(1/5) Installing libpcap (1.10.1-r0)
(2/5) Installing talloc (2.3.3-r1)
(3/5) Installing freeradius-lib (3.0.26-r0)
(4/5) Installing gdbm (1.23-r0)
(5/5) Installing freeradius (3.0.26-r0)
Executing freeradius-3.0.26-r0.pre-install
Executing freeradius-3.0.26-r0.post-install
Executing busybox-1.35.0-r17.trigger
OK: 36 MiB in 45 packages
What's worse is the support option:
~ # apk add keepassxc |
Beta Was this translation helpful? Give feedback.
-
|
There are also browser extensions that have TOTP (authenticator app) functionality. |
Beta Was this translation helpful? Give feedback.
-
|
The "KeePassXC Tutorial" was worthless - much too complicated - I needed a 10 line explanation which I found a minute of a 20 minute uTube video - to actually help people you need to make it as simple as possible and only tell what they need to know. |
Beta Was this translation helpful? Give feedback.
-
|
Hey @righthalfplane, I'm glad that you were able to find a video that pointed you in the right direction! |
Beta Was this translation helpful? Give feedback.
-
|
What world are these people living in, since when did we start trusting passwords to third-party browser extensions? |
Beta Was this translation helpful? Give feedback.
This comment was marked as off-topic.
This comment was marked as off-topic.
-
|
Hi @righthalfplane, thanks for the feedback. Have you been able to resolve the issue you noted in the opening post? To be specific, are you able to sign into GitHub with 2FA? If you're still having trouble, I'd love to learn more about the issue you are having. Are you looking for a 2FA solution which doesn't involve a mobile phone? If I have understood your problem correctly, Configuring two-factor authentication is a useful doc with a lot of options. I spotted a couple of options which help:
|
Beta Was this translation helpful? Give feedback.
-
|
I recommend migrating your account to GitLab, which allows importing repos from GitHub. They do not force 2FA on their users like GitHub does. They also have email 2FA which in my opinion is the best and most secure form of 2FA for the average user. |
Beta Was this translation helpful? Give feedback.
-
|
Hey there @62f, Are you having trouble opening the URL provided on your end? GitHub's Docs are public, and don't require you to sign in in order to view them. |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
Hi @righthalfplane, Just wanted to see if you got @benjiallen's message above and if the issue that you first reported when opening this discussion has been resolved? If not, we'd like to learn more about the issues that you're having and any roadblocks that you're facing. |
Beta Was this translation helpful? Give feedback.
-
|
@ghostinhershell dear Contact GitHub Support, is behind this: |
Beta Was this translation helpful? Give feedback.
-
What's worse is that after feeding the Authenticator-du-jour its QR-code-Meal 🥘, and pressing the button to prettify and lint the recovery hashedy-hashes into a selectable/copy/paste í-frame, there's not á shadow of evidence of what to do next. So i'm gumped into pressing the back arrow, which stærts the infernal process all óver anew. |
Beta Was this translation helpful? Give feedback.
-
|
LoL no, they aren’t. They might do equally as well be behind a paywall.
On Fri, Oct 13, 2023 at 8:53 AM Sarto Jama ***@***.***> wrote:
Hey there @62f <https://github.com/62f>,
Are you having trouble opening the URL provided on your end? GitHub's Docs
are public, and don't require you to sign in in order to view them.
—
Reply to this email directly, view it on GitHub
<#68928 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AQJKVJJLXGG2DWVYZCJVF63X7FBU5ANCNFSM6AAAAAA5OLL4BQ>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Tried to reply but was greeted with this:
Anyway I’m already on GitLab as a code contributor for Alpine, out of
necessity. The 500lb 🦍 in the room is that I’ve used GH for my GL login
for quite some time now, and you suggest migrating but there’s nothing to
migrate! 2FA was reported to be intended as a ˋnih!´ for the knights, I mean, 'coding
contributors' ONLY and their kinsmen, I mean co-pilots, or whatever- but to I myself who hadn't EVER contributed a single scrap of
code and is just a droll little beta tester, repository
cloner/builder/compiler and technical-issue reporter, 2FA ˋshrubbery‘ was never said to been appearing. TK;DR But NOW I'm being locked out, & I'm almost certain there're others.
Repeating in English : I can’t
write code to save my life, nor would I try. But the devs I must deal with on GH
do code, and many chose to fight the 2FA demon and remain bottled up in here. Are you also those and their coconspirators into the GL-cornfield, TOO, or are they simply trying to get away from their codeless counterparts?
…On Fri, Oct 13, 2023 at 7:38 AM kuroodo ***@***.***> wrote:
I recommend migrating your account to GitLab, which allows importing repos
from GitHub. They do not force 2FA on their users like GitHub does. They
also have email 2FA which in my opinion is the best and most secure form of
2FA for the average user.
—
Reply to this email directly, view it on GitHub
<#68928 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AQJKVJONPG7E4SBWOXT2I2LX7EY4XANCNFSM6AAAAAA5OLL4BQ>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
I recommend everyone leave github They are now just become bullies and another Microsoft app. They are unfit to host the open source community's work. Now they don't even let you decide how to authenticate. they force you to tie your account to SMS or some app. Move on. Github has lost it's way.Forcing 2fa against dev's will is EXACTLY the kind of behavior that made MS infamous. Why kill github? why don't you get it? MAKE 2FA OPTIONAL |
Beta Was this translation helpful? Give feedback.
-
|
Dear @AwokeKnowing (James D Morris). RtfWm. Generally this entire 🧵 but more specifically the contributors' response to me, who suggested that I migrate to GitLab. So your latter contribution here's basically a double-post echoing exactly that solution. Problem I'm having with that is: that I've ALREADY done that LONG AGO before 2FA requirement and my GL authentication relies on LOGGING IN TO GH. tL;dR, I am also unable to 🪵in to my GitLab account. |
Beta Was this translation helpful? Give feedback.
-
|
Hey there @righthalfplane, In response to this discussion post, and for anyone else that does have concerns about the accessibility of requiring two factor authentication when accessing GitHub, our Accessibility team has amended the Two Factor Authentication Frequently Asked Questions 🔑 🗝️ post to include the following heading: What options do you have for users who rely on assistive technology and users with accessibility requirements?. I'll also include the text here for reference:
Thanks! |
Beta Was this translation helpful? Give feedback.
-
|
You think a blind person's going to want to read and understand all that, especially with all the colloquialistic-technobabbly TerminologicalAlphabetSoup like " 'phishing' "? |
Beta Was this translation helpful? Give feedback.
-
|
Anyway, it's totally&utterly irrelevant. |
Beta Was this translation helpful? Give feedback.
-
|
HI @ghostinhershell , Your answer is meaningless double talk - you say, with no proof, that you have them covered - Post the a address of a page that a blind person can use to generate the 2FA and use it - off course it means nothing until a few blind people verify that with no other help that they could actually get things working. |
Beta Was this translation helpful? Give feedback.
-
|
@righthalfplane do you have a particular barrier you are encountering, or do you just dislike 2FA and are hypothesizing about potential accessibility issues? It's hard to tell from your feedback. It would be very helpful if you could point out a specific issue which you have encountered. I believe I've addressed the original question you had in the opening post. See my advice above. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @ghostinhershell, The policy you link to states that code contributors are required to use 2FA but @righthalfplane said they don't write code; they're a tester. Is there a way to adjust the setup of @righthalfplane's Github account from Github's end so they're not required to use 2FA? |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
Yesterday afternoon while I was searching for something (I should have saved it, but I was searching for something else), I ran across a email from a blind person who was complaining that people would not point him at the things that he actually need - so he wasted much time. THAT is what people did to me. I have been on the "internet" since February 1976 and I have written network applications for Los Alamos National Laboratory. I wasted 3 or 4 hours getting things to work, because I do not have a cell phone. Like I said above - The "KeePassXC Tutorial" was worthless - much too complicated - I needed a 10 line explanation which I found in the middle of a 20 minute uTube video. The changes of a non expert working this out on his own is just about zero or even given help like I got - he would need a lot of persistence and some luck to get things going. There are other thread here where people document their problems and have failed at their last post. You have taken a blind person into HomeDepot and said there you have everything you need to build your house - go to it. |
Beta Was this translation helpful? Give feedback.
-
|
Seeing the staff's copy/pasted response is honestly pretty sad. What's worse, when a blind person is told to read the steps or guides with no clear direction on where to start or even how to get 2FA to work. My sympathy for people with disability. As I write this I now only 2 days of grace period until my account is locked forever because I refuse to enable 2FA. The moment you force people including me to use 2FA is the moment you crossed the line by telling us we can't access our data despite knowing our login because "screw you - that's why" |
Beta Was this translation helpful? Give feedback.
-
Now see here... I've been taking people to task on social medias eg.ie. YouTube, et.Al., and as anyone may (if investigators can still read them) determine (as per all my previous posts clearly referencing only those in this thread, so focus, picky trolls-dearest, focus ), from which 'side' of this issue (if there are indeed any distinguishable sides to adopt) for whom I'm waging battle (Autobots and Decepticons, not so much are we yet)... and so as such am confined to express that the argument in question: being built upon incumbency of (insert adjective of import)-data, the relevance of those precious, ('existing', 'disappearing forever' accounts which are being irreversably-affected by the @dearly-afflictedDOES INDEED SOUND EXACTLY LIKE A SOCIAL ENGINEER'S ATTEMPTS TO HACK INTO SOMEONE ELSE'S ACCOUNT. So please, don't come dressed up as the exact thing of whom we're supposed to be fighting against here. |
Beta Was this translation helpful? Give feedback.
-
|
In my line of work, it's now referred to as a "Sterile Cockpit". You caused pilot overload, and got the same response I would've given to any other crew member. Let it be done on earth as it is in the Heavens, we bray. |
Beta Was this translation helpful? Give feedback.
-
Funny now that you mention that. If that really was my purpose, I would be a billionaire and wouldn't be here. But do tell me where exactly in your right mind you jumped to that conclusion. When did suddenly become a thing where one is not supposed to have emotions put in this writing? Would you rather I type like an NPC instead? I really gotta see this and look forward to your answer while I'm sipping tea. |
Beta Was this translation helpful? Give feedback.
-
So what you're dumb enough to be admitting is: that if emotional responses were nickels...? Or is it something much more complicated?
|
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
VIPLightning, your are correct. Note that Banks,Apple, Microsoft and uTube do not force people to use 2FA - It appears that GitHub has come up with this idea on their own. |
Beta Was this translation helpful? Give feedback.
-
Microsoft currently owns GutHub. Thereby, your own response, besides being an affront to another (of which I myself have identified as also having an invalid basis), does by itself rest firmly upon a particular foundation, the infirmity called: "circular logic". My question to you is, why would anyone waste even more time on an attempt at making a rebuttal to anything, especially of which, according to its author, is likely to be collapsed anyway or even become lost to time-immemorial in a couple of days according to its OP? Show us by placing these emoji stickers on top of it, exactly where the t r oll hurt you. |
Beta Was this translation helpful? Give feedback.
Hey there @righthalfplane,
In response to this discussion post, and for anyone else that does have concerns about the accessibility of requiring two factor authentication when accessing GitHub, our Accessibility team has amended the Two Factor Authentication Frequently Asked Questions 🔑 🗝️ post to include the following heading: What options do you have for users who rely on assistive technology and users with accessibility requirements?. I'll also include the text here for reference: