Comment by s9ix

Wouldn't enabling two-factor on the primary login and naming sites whatever you want solve most gripes with this (in the comments here)?

i.e. I name hacker news hn or hack, as opposed to news.ycombinator.com - one more thing to guess for an attacker.