Bypassing two-factor authentication

Two factor authentication is supposed to answer a simple question: even if someone knows your password, can they actually get in? Most of…