Why are banks still getting authentication so wrong? (haba.sh) on hacker-news Emailing a one-time code is worse than passwords (danielh.cc) on hacker-news email