Comment on Booking.com ignores twofactor, lets everyone email-login without a passwordparentComments−withinboredom2yAh, looks like it is tied to "has this IP ever logged in with this email" kinda thing.
Comments
Ah, looks like it is tied to "has this IP ever logged in with this email" kinda thing.