Fwiw 2FA* saved my ass once, many years ago, when someone hijacked my domain**, set an email forward and reset the Github password.

* = and the hackers lazyness, they could have done way more damage

** = where I forgot to set 2FA AND probably reused a password, despite having stopped reusing passwords years before the hack - forgot to change that one

Reply to this note

Please Login to reply.

Discussion

I noticed and cut them off in a matter of hours. I guess they were Russian or Chinese working office hours and just stopped for the day.