@brian_greenberg@infosec.exchange Mm. It's analogous to attacking password recovery mechanisms rather than passwords.