schneier
Stuart Schechter published a good primer on the security issues surrounding two-factor authentication.
While it’s often an important security measure, it’s not a panacea. Stuart discusses the usability and security issues that you have to think about before deploying the system.