Hacker News Reader

Perhaps it should ask an additional security question or passphrase for 'dangerous' operations like remote wipe.

Two-factor authentication (using say your phone like Google) wouldn't work however because typically it's your phone that is stolen and you are trying to wipe.

View on HN

You could use something besides a phone for 2-factor authentication--e.g. YubiKey.

Google + Yubikey would be great. Google + 2 step authentication + Yubikey would be a dream (and a bit over-kill?)

It seems to work with some limitations as the yubikey has no time source.

http://binaryelysium.com/blog/2011/12/13/a-reluctant-relatio...

Google + 2 step authentication

Did you mean 2 factor authentication?

Google + 2 step authentication + Yubikey

Is there any reason why you can't do this? It seems like it would work? (I've never used Yubikey so I might be missing something)

Google actually calls it "2-step verification"

source: http://support.google.com/accounts/bin/answer.py?hl=en&a...

That's why google let you use multiple phone numbers to verify.

Lose your main phone? No problem, login to your account using the two factor code from your landline (or partner's phone).

Reply on news.ycombinator.com