If you're using a service that allows 2-step authentication -- GMail and Dropbox are a couple of high-profile names -- you really ought to be using it. There's a lot to be said for the extra layer of ...