@thomasfuchs this is one of those 'even a broken clock is right twice a day' situations. Twitter is the broken clock here; SMS as a second factor is insecure.