This story is another testament to the dangers of using SMS as second factor.