Push notification two-factor auth considered harmful | Hacker News Reader