The 2/3 rule for multi-factor authentication | Hacker News Reader