Thanks to Henrik Schack‘s great work in developing a WordPress Yubikey plugin, I now use two-factor hardware-assisted authentication technology (i.e., the Yubikey) to log in to my blog. Kudos, Henrik!
Since my server still uses php4 (sigh), I had to create a small patch to make it use mhash instead of hash.