https://www.geoffpalmer.co.nz/facebook-compromises-two-factor-authentication/