Authentigator was most likely how the spammers got past the protections. Making web based auth is a bad idea, because scripts can easily use the service too.

>>17708315

Summary?