some sent a message to Dan Schulman President and CEO of PayPal Email Address that said:
I recently came across a huge liability in your two-step verification program for Paypal.
I contacted your bug tracker team 2 weeks ago with it, gave them all the information necessary and they basically told me that if your passwords gets stolen it's not their job to protect your account from any intrusions.
I assumed it would take some time for them to fix it. It's been 2 weeks since I submitted this bug and it has not been fixed.
