[payne92]

Security is relative, NOT absolute.

Involving SMS in the authentication process raises the bar significantly for script kiddie attacks using password databases. It also forces a larger and more detailed forensic trail for any attack.

[33Backpack33]

Not when script kiddies already have free tools like this https://vimeo.com/308709275