On Sun, 2022-09-04 at 10:18 +0200, Vitaly Zaitsev via devel wrote:
On 04/09/2022 02:40, Adam Williamson wrote:
> Maybe if there are
> folks like that they'd be happy to drop the privileges so if they do
> lose their laptop or something, the consequences are more limited.
We just need to force all proven packagers to use 2FA. Problem solved.
Well, not really. 2FA isn't a magic bullet. I would be in favor of
doing this, but you can't treat any security measure as solving all
your problems completely.
--
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net