Enabling 2FA on major Github orgs

I think it would be great for major orgs to turn on 2FA for all org members as general security hygiene. We did this on JuliaLang a while ago, and I enabled it on JuliaPackaging today. I am sure some orgs already do this, but I am posting this here to encourage more orgs to require 2FA for all members.

-viral

10 Likes

@viralbshah Can you also implement this on JuliaCI and JuliaRegistries?

We did this in JuliaCollections in August.

2 Likes

I enabled 2FA on JuliaCI. JuliaRegistries already has it.

-viral

1 Like

JuliaDiffEq requires this for write privileges, and we plan to start booting people without it soon.

1 Like

Bumping this thread again. Many orgs still do not have 2FA for all owners. How can we go about making this happen for owners and members?

-viral

3 Likes

It might be helpful to assemble a list of Julia orgs, then we can start working our way down the list by contacting owners, etc.

I extracted all orgs in General (which includes user accounts as well as orgs). There are 94 with the Julia prefix, which suggests that it is somewhat official. Both lists are in the gist below. Maybe about 30 of these may need 2FA attention to start with?

-viral

SciML now requires 2FA

2FA now also required on JuliaParallel, JuliaBerry, JuliaSparse and a few others I am part of.

There is also a list of GitHub groups here:

which could provide a smaller list to focus on first.

In fact my hope was to use this opportunity to curate the list of orgs that provide popular packages, and then go back and update it on the julia website. I even want to advertise the orgs and the packages a bit more on julialang.org instead of just listing them.

-viral

2 Likes

JuliaPDE has 2FA enabled.