The announcement today from Reddit that some of its systems were comprised even though they were protected with two-factor authentication is a warning that SMS-based authentication isn’t good ...

A million two-factor authentication codes sent via SMS passed through an obscure third-party company. Here's how it happened and why it's a problem.