Whilst physical security measures are the sole responsible of the home owner, service providers on the Web frequently impose unworkable security mechanisms on their users. Here’s one cautionary tale of how this goes bad even for a security researcher.