Hirsch Singhal

@beatngu1101 @GHchangelog It's in the plans! For now it'll be transfers, but we've got a lot of different things to "promote" to the enterprise, so we're looking at better patterns for that.

@GHchangelog Is or will there be a way to „promote“ existing org apps to the enterprise level?

Enterprises can create GitHub Apps for use within the Enterprise github.blog/changelog/2024…

Pre-defined organization roles that grant access to all repositories github.blog/changelog/2024…

@TruBluDevil Ah. What if they don't want you to? There's a name field on GitHub even! They could just fill that out? We don't offer a way to mandate that today though.

@TruBluDevil Say more about how or why you'd want such a thing? ☺️

Product designer Hemant Kumar discusses implementing 2FA at scale, driven by empathy for users and a commitment to security. The project showcases collaboration, design, and strategic communication. youtube.com/watch?v=HbXs0R…

@nas_bench I think you can guess why that is though, right? Should we be checking that a txt file doesn't have DICOM headers, just in case?

One thing I dislike about Windows file "properties". Is that it chose to hide or show some information depending on the extension of the file. For example a ".cpl" has an original filename field but if you inspect it won't show it. Change the extension to ".dll" and its now magically there -_- @JenMsft can we change this or at least have the ability to do so in future versions.

@goo @1Password That'd do it!

@hpsin_ @1Password What about being able to share a location from 1Password? #ln7owR7HXvx-hLmiOMISFlOc1hYywHDvtqpZQzdJYpk" target="_blank" rel="nofollow noopener">share.1password.com/s#ln7owR7HXvx-…

Add GPS locations to items within @1Password for them to appear when you're actually nearby. We're excited to hear of all the ways you can think of to make use of this! Check it out: youtu.be/yYqLtHIL5Rw?si… Give us your thoughts and feedback! #latest" target="_blank" rel="nofollow noopener">1password.community/discussion/142…

@ericwastl @github Please stay on that oauth app, it's the one with the raised limit.

@hpsin_ @github Thank you so much!!! Do I need to stay on my new OAuth app in my GitHub Enterprise org, or is there a way for me to go back to my old OAuth app in my personal account?

Does anyone at @github do #AdventOfCode? We're getting lots of "429 Too Many Requests" from our OAuth github.com/login/oauth/ac… requests, even after switching to an org that uses GitHub Enterprise Cloud. No response from GitHub support after 9 hours. :(

@SwiftOnSecurity @CHECKYSTOMPER69 O.o Now I have to go find out who Seymour is. Glad someone asked about the name.

@CHECKYSTOMPER69 Wait shit I started from the name Sy from One Hour Photo and just mindlessly put in Hirsch in there because it sounded right. It was not my intention. Oops

Death Abstainers The story opens on Semor Hirsch, a technician at LifeAlike Technologies. For the parents of dead teens, it takes their writings and photos and videos and creates a digital twin that periodically sends updates to the parents as if they were aging normally.

@indy_singh_uk @evadne @github Thanks!

@hpsin_ @evadne @github I'll try a repo tomorrow. Happy to provide a bug report if I'm successful.

OK, so it was actually a timing issue @github The code is 6 digits When I put in the 6th digit the form automatically starts submitting BUT I can still hit the RETURN key Once I hit RETURN key the 2nd submission happens immediately and the code is invalid I just had to press 6 keys and let it finish and I got in 😳

@evadne @indy_singh_uk @github Hm, it's at the speed of your browser's JS engine, since the button should disable as soon as the field hits 6 digits. I'll play around a bit to see what I can repro, even Chrome throttling doesn't help.

@hpsin_ @indy_singh_uk @github 😇 It helps if you are far away like maybe in UK trying to access the host in US. The added latency helps to smoke the problem out

@cStreeks @github @GitHubSecurity But you don't have to do 2FA after you use your passkey, once you enable 2FA. It counts as both (like Google, Microsoft, etc).

@cStreeks @github @GitHubSecurity They don't count as 2FA in your case because you don't have 2FA enabled, and we're not going to silently enable it on people. We do require additional 2FA methods to be registered right now because we're still figuring out how often people lose their passkeys.

Hey @github @GitHubSecurity , why don't my passkeys count as a form of 2FA? 😶

@evadne @indy_singh_uk @github Although I'll be honest I'm not fast enough to repro this. We added some logic that blocks double-use of 2FA codes, per spec, and it doesn't have debounce (which, across HTTP requests... sigh).

@evadne @indy_singh_uk @github Thanks for figuring this out, it helps with some of the reports we've gotten. I'll open the bug internally.

@johnzabroski @github Are you trying to sign in to your account? You might want to check your security log - someone might be trying to get into your account and is triggering the prompt on your device because they have your password.

@github 2fa is broken on Android browsers. I don't get a 2fa code but the github mobile app asks me to enter one.

@SPSquonK Quel est le probleme? Le nouveau design veut que tu actives 2 modes de 2FA (une cle securite et TOTP par example), c'etait un probleme dans le passe. (Desole pour mon francais)

J'ai finalement activé le 2FA sur Github pour pouvoir mettre en privé un dépôt (vous emballez pas, la manière dont j'ai expédié la question 2FA est moins sûre que si je n'avais pas le 2FA) et wtf, c'est quoi ce nouveau design complètement horrible ?