How Google Authenticator made one company’s network breach much, much worse

Lots more discussion on the original post over here: https://news.ycombinator.com/item?id=37500895