A million two-factor authentication codes sent via SMS passed through an obscure third-party company. Here's how it happened and why it's a problem.

Simplifying Two-Factor Authentication Jenkins and his colleagues have devised a simpler variation of TFA that does not require a timestamp and can work directly between two devices without third ...