andreros

The slideshow is making me dizzy. I think it would be better without the transition.

I would recommend Supervisord (http://supervisord.org/).

To update app: Copy new binary, "supervisorctl restart myapp", done.

This will probably result in dropped requests if you aren't using a reverse proxy or load balancer in the middle.

Wow, this is great. Looking forward to the completed book!

Assuming an attacker has complete control over your computer, and your phone is within bluetooth range, can he make the phone generate a token without user interaction?

I was assuming the user would have to click a button on the phone or something, but I couldn't see it in the video.

My only complaint is that it doesn't tick on my phone.

The favicon is slightly unreadable, and could easily be improved.