Comment to 'Two-Factor Verification'