i believe he's referring to this: http://www.scmagazineuk.com/authy-patches-after-2fa-bypassed...