How could GitHub improve the password security of its users?
20th November 2013
My answer to How could GitHub improve the password security of its users? on Quora
By doing exactly what they’re doing already: adding more sophisticated rate limiting, and preventing users from using common weak passwords.
Their account security practices are already best-in-industry: they support two-factor authentication and their “Security History” interface at https://github.com/settings/secu... is the best I’ve seen on any website.
The way they store passwords (correctly, using bcrypt) had nothing to do with this particular security incident.
More recent articles
- My review of Claude's new Code Interpreter, released under a very confusing name - 9th September 2025
- Recreating the Apollo AI adoption rate chart with GPT-5, Python and Pyodide - 9th September 2025
- GPT-5 Thinking in ChatGPT (aka Research Goblin) is shockingly good at search - 6th September 2025