VPN recommendations?

[Bill Freeman]

Ben Scott writes:
 >   PPTP might be worth considering if most passwords weren't trivially
 > cracked.  Given the scenario you give, it's a fair bet the guy's
 > password is also his last name, or maybe (if he's clever) his kid's
 > birthday.
 > 
 >   But along the same lines, he's probably also got enough spyware on
 > his laptop to make the firewall superfluous in the first place.  So
 > PPTP may be an appropriately (in)secure solution for such an
 > operation.

A two factor scheme might help in this kind of scenario.  It's
supposed to be possible with OpenVPN:

    http://www.wikidsystems.net/howtos/openvpn_two_factor

I presume (but don't know) that it's possible with PPTP.

Bill