Apple Two-Factor authentication has a terrible flaw. Posted on December 15, 2014 by jgordon Link. An attacker can force use of recovery key you don’t have.