The Failure of Two-Factor Authentication. Schneier 2008. Posted on December 20, 2012 by jgordon Link. Still cutting edge today. We are so lost.