Two-factor authentication is a cornerstone of modern online security. Given how it works, you would think that it's foolproof ...