3 ms·

Of course. A simple email with a confirm link would solve this.

• alanh 15y ago
  Email to what, your @me.com email that the attacker may very well have access to?
  • sprovoost 15y ago
    It's a numbers game; it would help people without an @me.com account or with a secondary email address.
  • deleted 15y ago
    [deleted]
  • shanselman 15y ago
    Preferably my Google Apps account, for which I have two factor auth enabled. Or perhaps my SmartCard enabled work email. Or even my SMS 2-factor Facebook email.