The hacker gained access to Reddit's internal systems by circumventing SMS-based two-factor authentication on employee accounts. "We learned that SMS-based authentication is not nearly as secure as we would hope," a website engineer said.
Source Link
