GitHub 正式關閉賬戶密碼認證服務，改用基於令牌形式的操作認證

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"8月13日，GitHub正式宣佈，從當地時間9點（北京時間 14 日 0 點） 開始，將不再接受賬戶密碼來驗證 Git 操作，所有 Git 操作的認證將基於令牌形式。也就是說，從8月14日開始，開發者將無法使用密碼進行身份驗證，也就不能進一步執行 Git 操作。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/8c\/8c340bbfd5e0f79d82e03d7b8dd39441.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"GitHub 在"},{"type":"link","attrs":{"href":"https:\/\/github.blog\/changelog\/2021-08-12-git-password-authentication-is-shutting-down\/","title":null,"type":null},"content":[{"type":"text","text":"官方博客"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"表示：\"從 2021 年 8 月 13 日 09:00 PST（北京時間 14 日 0 點） 開始，我們在 GitHub.com 上認證 Git 操作時將不再接受賬戶密碼。取而代之的是，所有需要認證的 Git 操作將需要基於令牌的認證。\""}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"受到影響的工作流有："}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"命令行 Git 訪問；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"使用 Git 的桌面應用程序（GitHub Desktop 不受影響）；"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"使用密碼直接訪問 GitHub.com 上各 Git repo 的一切應用程序 \/ 服務。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如果用戶已經啓用了"},{"type":"link","attrs":{"href":"https:\/\/docs.github.com\/en\/github\/authenticating-to-github\/securing-your-account-with-two-factor-authentication-2fa\/configuring-two-factor-authentication","title":null,"type":null},"content":[{"type":"text","text":"雙因素身份驗證"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"（2FA），則代表已經在使用基於令牌或 SSH 的方式進行身份驗證，那麼則不受此項變更的影響。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"GitHub 官方表示，這一舉措是爲了提高 Git 操作的安全性，防止密碼撞庫等事情發生。據Github 2020 年度開發者報告顯示，自 2008 年推出以來，GitHub 已經成爲互聯網上最大的項目管理和開源協作平臺，社區已經擁有 5600 萬開發者。因此，隨着 GitHub 規模和社區影響力的不斷變大，安全變得越來越重要。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"爲此，GitHub 推出了一系列安全增強功能，來幫助用戶提升安全水平，比如雙因素身份驗證、登錄警報、認證設備、防止使用已泄露的密碼以及支持 WebAuth 等等。在這些功能的支持下，攻擊者將更難於獲得已經被用於多個網站的重複密碼，無法單純藉此完成密碼撞庫。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"與基於密碼的傳統身份驗證機制相比，令牌保護的安全優勢比較明顯，令牌的使用範圍可以嚴格控制，且令牌的複雜度遠高於用戶需要硬性記憶並定期輸入的簡單密碼，因此不受字典或暴力破解等行爲的影響。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"延伸閱讀："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/mp.weixin.qq.com\/s\/QLIWjCPrMTEUN0dg8MPVPg","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/mp.weixin.qq.com\/s\/QLIWjCPrMTEUN0dg8MPVPg"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]}]}