on 11-Oct-2010 16:34
Your cell phone is the 2nd factor.
Regarding OAuth, here are some links to get you started.
Twitter implemented it, but they asked developers not to put their keys in their application (and then allowed some important clients to exactly that)