Single post in Account Breach incident

I am definitely against Security Questions being a form of two-step login because people answer these without thinking ALL THE TIME on those Social Media pics of "What's your Angel Name?" or whatever. That said...Blizzard has a neat little two step, where every time you attempt to log in, it displays a code on the screen. That same code is displayed on the Verification App on your phone. And you simply tap "Accept" or "Decline" to verify that it's you logging in. That would require members to sign up using their Mobile phone, and most people don't want to give out any personal info to sites (despite the fact that ALL of your info except passwords is public knowledge anyway). It would likely also cause problems for players who share a single Cell AND IP. Although, it could be sent to Email. Overall, getting a decent two step authorization to work with everyone is going to take some thought. The BEST method of protection is for people to use decent Alphanumeric Passwords, as they're much harder to crack. And I don't mean things like P455W0RD. That's easy. I mean things like...EtErnaL5thGuaRdiaN or something of the sort. It has Capitals, Lowercase, and a number. AND the mix of Upper and Lowercase would take considerable time to crack.