Hacker News new | ask | show | jobs
by jamesmcn 5062 days ago
The trouble with two-factor authentication is that it tends to be a nucleus around which a monoculture of security procedure forms. It is convenient to have a single sign-on that is believed to be beyond reproach, even if that sign on is a bit more obnoxious than the old username + password combo.

Until your two-factor system gets hacked, as happened to RSA: http://bits.blogs.nytimes.com/2011/04/02/the-rsa-hack-how-th...

The more common a security system is, the more attractive a target it is for professional (organized crime) hackers to attack.