http://feedproxy.google.com/~r/Securityweek/~3/3p_rQX_BRFo/two-factor-authentication-bypassed-simple-attacks