Re: NumPy security roadmap proposal
matti picus via NumPy-Discussion <[email protected]>
| Newsgroups | gmane.comp.python.numeric.general |
|---|---|
| Message-ID | <CAO8bCgii4vodcPxYhv8XUqFmszEVjg3wEVEcgiXiF5kteS-cQg@mail.gmail.com> |
On Fri, Jun 13, 2025 at 9:40 AM Ralf Gommers via NumPy-Discussion <[email protected]> wrote: > > ... > For 2FA and repository/PyPI access, we'll start making changes soon. Note that GitHub has recently made changes to its 2FA settings that ask for action from many people: on https://github.com/orgs/numpy/people you can see that under "Two-factor authentication" the options increased; there is now a Secure/Insecure distinction instead of only Enabled/Disabled. If you want to move yourself from Insecure to Secure, you have to disable the SMS/mobile recovery option in your personal settings under "Password and authentication". A large majority of the 94 people with permissions are currently marked as Insecure. > > Cheers, > Ralf > You may need member acess to see the "Two-factor authentication" dropdown selector, but in any case it seems disabling the SMS/mobile recovery option is now recommended practice. Be sure to download and keep your recovery codes safe, as that will now be the only accepted mode to regain access if you loose your 2fa access (i.e. loose or change your phone number). _______________________________________________ NumPy-Discussion mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3//lists/numpy-discussion.python.org Member address: [email protected]