&gt;  Actually, I do have 2FA enabled on my account. But I don&#x27;t think I had it enabled at the time for the very first attack.<p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10965111" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10965111</a>