3 ms·
Because for an attacker to show up in person comes with a risk of getting caught. Also, it becomes much harder to attack multiple accounts.
by munch117 4y ago
Because for an attacker to show up in person comes with a risk of getting caught. Also, it becomes much harder to attack multiple accounts.
- crazygringo 4y agoWho said anything about attackers? This is about resets -- which happens if you forget your password, lose your 2FA device and codes, or you believe your password may be compromised. Attackers would continue going after your passwords as they do now, and just like now, you'd never know when they've got yours except in the occasional breach-made-public. Attacking accounts by stealing passwords in bulk (through malware, hacking, etc.) is not made even a smidgen harder by this. Remember this is about in-person password resets, not in-person logins.