Forget zero-days, credential theft much more valuable. Posted on May 6, 2016 by jgordon Link. Only Google does 2FA well.
