4 ms·
Why isn't this part of every password-reset procedure? "We'll mail a reset code to the postal address you gave when you created your account" This would mean t
by MarkMc 14y ago
Why isn't this part of every password-reset procedure? "We'll mail a reset code to the postal address you gave when you created your account"
This would mean that the attacker would have to commit mail fraud, which (a) is quite difficult; and (b) carries heavy penalties in law.
- ghshephard 14y agoOne problem is I have no idea what physical address Apple has for me, but I'm sure I have moved at least three times (as many as five) since I gave them that address. A better solution is require a notarized physical mail in the event of password changes for high-security accounts. Everything else just goes to your email account.
- petitmiam 14y agoI had this problem with a website from the Australian Government. I was actually trying to login to update my address, but I didn't know the password. For that though, I was able to visit a store front and update it after providing ID. I guess Apple could do a similar thing.
- MarkMc 14y agoApple already prompts me to agree to new terms and conditions every few months. Surely it wouldn't be too difficult to add '...and is this still your address?'
- dinkumthinkum 14y agoBecause it's very inconvenient. I'm not judging, just answering. :)