ParentFull threadshadowflit·If you have two factor authentication but leave yourself signed in, a password alone will not get an intruder into your account, but a cookie will.View on HN