No more phishing
Lock 04Choose
Attackers run a look-alike admin console that passes each sign-in to the real one as it happens. Others hold old admin passwords and take over phone numbers. Pick the second sign-in step for 40 admins. Allow 0 attacker sign-ins. Keep admin p99 under 1 s.
Goals
Not tested yet