Roku closes the barn door, badly, after a half-million accounts are compromised

Roku has finally turned on two-factor authentication — after it learned that more than 500,000 accounts were hit by a credential-stuffing attack.