@disneyplus
did you know that your 2FA for forgotten password can be brute-forced? It takes 75ms to redeem your code. With 1 million permutations, no apparent throttling, and multiple threads, this would take less than an hour. How do I know? My account was hacked this way.

