Schneier: The Failure of Two-Factor Authentication

The Failure of Two-Factor Authentication (March 15, 2005)

From the article:

Two-factor authentication [...] works for local login, and it works within some corporate networks. But it won't work for remote authentication over the Internet.