Notices by Leo@ALLES (leoluk@chaos.social)

@dalias @GossiTheDog Security Keys aren't draconian, they're easy to use and there's plenty of open source implementations (both software and hardware). Since LPMs aren't going to disappear overnight, they're really the only practical solution to such targeted phishing attacks.

@GossiTheDog It's incredible that high profile targets like npm or GitHub STILL aren't enforcing Security Keys...