Re: How stupid do you have to be?
I am not at all sure that the "sender" number of the text message is checked in a suitable way by the network carrier. So it could possibly be the same number the code came from, or it could be 900913 (look! says google irhgt there so it must be true, right?)
Yes, as a recovery process, it wouldn't make sense, but people will not stop to think if you put them into a situation they're not familiar with and give them instruction. If people always stopped to think about everything, nobody would ever take down the network interface they're currently logged in through to that server that's physically hard to get to, the wouldn't clap their hands when airport security asks them to, etc.