When two-factor authentication is useless
Two-factor authentication protects your account from theft — until you yourself give away your one-time password.
