What Johnny thinks about using two-factor authentication on GitHub: A survey among open-source developers

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F24%3A00136602" target="_blank" >RIV/00216224:14330/24:00136602 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1145/3664476.3670885" target="_blank" >http://dx.doi.org/10.1145/3664476.3670885</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3664476.3670885" target="_blank" >10.1145/3664476.3670885</a>

Result language
angličtina
Original language name
What Johnny thinks about using two-factor authentication on GitHub: A survey among open-source developers
Original language description
Several security issues in open-source projects demonstrate that developer accounts get misused or stolen if weak authentication is used. Many services have started to enforce second-factor authentication (2FA) for their users. This is also the case for GitHub, the largest open-source development platform. We surveyed 110 open-source developers using GitHub to explore how they perceive the importance of authentication on GitHub. Our participants perceived secure authentication as important as other security mechanisms (e.g., commit signing) to improve open-source security. 2FA usage of the project owner was perceived as one of the most important mechanisms. Around half of the participants (51%) were aware of the planned 2FA enforcement on GitHub. Their perception of this enforcement was rather positive. They agreed to enforce 2FA for new devices and new locations, but they were slightly hesitant to use it after some time. They also rather agreed to enforce various user groups on GitHub to use 2FA. Our participants also perceived GitHub authentication methods positively with respect to their usability and security. Most of our participants (68%) reported that they had enabled 2FA on their GitHub accounts.
Czech name
—
Czech description
—

Publication year
2024
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
Proceedings of the 21st International Workshop on Trust, Privacy and Security in the Digital Society
ISBN
9798400717185
ISSN
—
e-ISSN
—
Number of pages
11
Pages from-to
1-11
Publisher name
Association for Computing Machinery
Place of publication
Vídeň, Rakousko
Event location
Vídeň, Rakousko
Event date
Jan 1, 2024
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
001283894700134

Similar results(10)