GitHub has announced its decision to require all users of GitHub.com involved in code development to use two-factor authentication (2FA) by the end of 2023. According to GitHub, the risk of malicious actors gaining access to repositories as a result of account takeovers is one of the most significant threats, as a successful attack could lead to the introduction of hidden changes in popular products and libraries used as dependencies.
The new requirement will enhance the security of the development process and protect repositories from malicious changes resulting from credential leaks, using the same password on a compromised site, breaches of the developer's local system, or social engineering techniques. According to GitHub statistics, only 16.5% of active users currently utilize two-factor authentication. By the end of 2023, GitHub intends to prohibit the ability to submit changes without two-factor authentication.
Source: opennet.ru
