<prompt> Human: Schwabs terrible password policies have been discussed before That thread notes hat they offer free tokens for two-factor authentication and recommends using this to bolster your weak password.Well, I decided to test the security of their token system. Their FAQ mentions you can call them to get a temporary code if you leave your token behind and need access to your account. I called them up and asked for a temporary code. After providing only my name, birthday, phone number, account number, and mothers maiden name, I was given a code valid for 24 hours.TL;DR you can bypass the token easily with publicly-available information.  <response>: Have we any reports of people who had their accounts compromised? 