GitHub to require 2FA for all contributors starting from March 13

Use security keys or TOTP. No one should be using SMS based 2FA considering how broken it is (SIM swap attacks). It shouldn't even be an option IMO.

I find it quite ironic that the words "Supply Chain Attack" and "SMS-based 2FA" are mentioned in the same blog post. It's like no one made the connection.

We promise that all of those lovely mobile phone numbers won't be used for marketing purposes.

I don't own a cell phone. SMS won't work.