When Best Practice Isn’t Good Enough - bypassing common forms of 2FA | Hacker News Reader