Password Reset Security Flaw

[Rendecrow]

In theory, in practice people aren't going to write exploits that depend on having the multi-factor authorization on the same machine when they have to be a minority of token users, and it's demonstrated that so many people don't even use security tokens. Low hanging fruit and all.

I can agree with that. Though that being said, it still would be dumb to have the token on your computer, lol. That is effectively like hiding your spare house key under your doormat. The door is still locked, but..... :P

If more people would just use the token a LOT of the gill seller issues would go away as they can't hack as many accounts. The 5 second "hassle" of entering the code is totally worth it. I don't understand people who refuse to use it.