> The only thing you can do [...] Or you could build a trusted end point. Otherwise even two factor auth is only palliative. (But yes: cost-benefit, I hear you

> The only thing you can do [...] Or you could build a trusted end point. Otherwise even two factor auth is only palliative. (But yes: cost-benefit, I hear you). http://www.businesscomputingworld.co.uk/two-factor-authentication-powerless-against-real-time-phishing-attacks/ http://www.businesscomputingworld.co.uk/two-factor-authentic...