Comment by ranyume

It's pretty crazy. You can be authenticated on a website, and the website still asks you to use your phone to.. validate what you're doing on the pc.