I abused 2FA to maintain persistence after a password change

Fascinating writeup, Google 2FA is the first system covered.