Regardless of the technical merits of the approach, are there that many people who care about protecting their Twitter account that badly?
I would understand a bank thinking very hard about this problem, or an email service (most bank account thefts happen not from breaking passwords but resetting them via email, so email inboxes are extremely sensitive).
But a Twitter account? Aren't they over estimating the importance of their data a bit?
I think the real reason is that they are trying to kill whatever third party Twitter clients are left.
Given that companies, individuals, dissidents, and sitting government officials use Twitter as both public & private communication streams in many cases the security of the account is more valuable than a checking account with a couple of thousand dollars in it.
I would understand a bank thinking very hard about this problem, or an email service (most bank account thefts happen not from breaking passwords but resetting them via email, so email inboxes are extremely sensitive).
But a Twitter account? Aren't they over estimating the importance of their data a bit?
I think the real reason is that they are trying to kill whatever third party Twitter clients are left.