A hacker shows how you can take over someone's online account in minutes using nothing but a phone