I can't wait for the day that someone implementing two-factor authentication doesn't call for a Hacker News post. It's a little frightening how easy it would be for major damage to be done to a business or individual with just a single stolen password when you consider how many important services don't offer two-factor authentication (banks, brokerages, registrars, DNS providers, VPS hosts, Heroku).