Websites that authenticate users through links and codes sent in text messages are imperiling the privacy of millions of ...