A million two-factor authentication codes sent via SMS passed through an obscure third-party company. Here's how it happened ...

I have long encouraged the use of two-factor authentication (2FA) or two-step verification (2SV) with online accounts whenever possible (for more about the difference, see “Two-Factor Authentication, ...