On Thursday, 11 August 2016 at 07:59:11 UTC, Walter Bright wrote:
Yeah, I worry about being locked out as well. There's also
nothing private in the dlang repository, but a malicious person
could just delete everything and it would be a major problem
for us to recover from that.
They do provide an option for a second phone (which I enabled)
and sent a set of recovery codes. This you can put into your
safety deposit box as a last resort.
I keep a rolling set of backups, with one set in the safety
deposit box.
2FA is going to become increasingly common, and I expect we'll
all have to get used to it.
You could also set up an "unsuspicious" dummy repo on Github
which is an identical twin of the official D repo, under a
different user and repo name ("Balter Wright", Digital Neptune :)
