Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.comp.software.thunderbird > #3607

Re: How to recover from Google dropping password support on May 30th 2022

From "Carlos E.R." <robin_listas@es.invalid>
Newsgroups alt.comp.software.thunderbird, alt.comp.microsoft.windows, alt.os.linux
Subject Re: How to recover from Google dropping password support on May 30th 2022
Date 2022-03-05 00:00 +0100
Message-ID <99iafi-j93.ln1@Telcontar.valinor> (permalink)
References <svtge1$vja$1@gioia.aioe.org> <629afi-d8g.ln1@Telcontar.valinor> <svttfj$450$1@dont-email.me> <0mbafi-8li.ln1@Telcontar.valinor> <svu32i$ekr$1@dont-email.me>

Cross-posted to 3 groups.

Show all headers | View raw


On 2022-03-04 23:15, The Real Bev wrote:
> On 03/04/2022 01:07 PM, Carlos E.R. wrote:
>> On 2022-03-04 21:40, The Real Bev wrote:
>>> On 03/04/2022 12:23 PM, Carlos E.R. wrote:
>>>> On 2022-03-04 17:57, Andy Burnelli wrote:
>>
>> ...
>>
>>>>> Do you have any solution that allows us to keep using a password in
>>>>> an MUA?
>>>>
>>>>
>>>> As you are setting the followup to alt.comp.software.thunderbird (which
>>>> I ignored, of course), it means that you are only interested in an
>>>> answer for Thunderbird.
>>>>
>>>> So, for Thunderbird, the solution is obvious: Use Oauth2, like it or 
>>>> not.
>>>>
>>>> Alternatively, use application passwords (a different password for each
>>>> application). This requires you to active 2FA, which I know you dislike
>>>> because it implies using your phone.
>>>>
>>>> Thus you can only stop using Google.
>>>
>>> So let me get this straight...  I can keep using Thunderbird38 on my
>>> computer with my gmail accounts as long as I implement Oauth2 (whatever
>>> that is) and delete my stored passwords (which I just saved with an xv
>>> screenshot).
>>
>> No.
>>
>> You need to change to a modern version of Thunderbird that does support
>> Oauth2, and on the affected gmail account change security settings to
>>
>>     connection security:    ssl/tls
>>     authentication method:  OAuth2
> 
> The authentication settings are individual for each account.  Double 
> crap.  I have 14 mail accounts (not all gmail) and 6 news accounts.  The 
> passwords all seem to be saved in the same file/database/whatever.  So 
> for google's 'security' I have to re-enter all the non-google 
> information as well as ensuring that the gmail smtp server will still 
> work with the non-google mail accounts....
> 
> My profile, including my stored mail going back to 1990, is 8.7GB.  It's 
> irreplaceable.  Assuming I have to give up the extensions and .css 
> entries that stopped working in versions later than 38, how can I avoid 
> losing all that?  (1) A simple update to whatever the latest POS is or 
> (2) a completely new thunderbird installation, create a new profile, and 
> copy over the contents of the old profile?  Or something else? I 
> normally use method #2 with firefox, but I haven't made any changes to 
> TB since 2015.


Oauth2 is interactive.

So, when you configure for oauth, Thunderbird will prompt with a 
different window to type your credentials (I think it is done with 
javascript).

You can not enter your credentials in a configuration file. Thunderbird 
must see you typing the login and password, and gmail must believe you. 
AFAIR it can do things like asking you to identify pedestrian crossings 
in a bunch of small photos. Yes, just as if you login via web.



>> Alternatively, set up application passwords.
> 
> Does TB38 allow that?  Seems like a better alternative.

It doesn't depend on the tool.

You have to login via web, enter certain menu (sorry, I forgot which, 
but I can look it up if you want), and ask google to generate the 
password for the external tool. And it is a long one.

This only works if you have 2FA enabled.


>>> What about uploading photos to google photos?  What about using google
>>> maps?  What about my saved places in google maps?  What about those
>>> things using my phone instead of my linux (or windows or laptop or other
>>> people's computers) computer?  Will they send me a text message with a
>>> code to load in every single time I use a google app?
>>
>> As we are not in the phone forums, and this was posted to Windows and
>> Linux forums instead, you are thus using a web browser to access any of
>> that, so you are not affected.
>>
>> (In an android phone, you are already logged in to Google, so you are
>> not affected, either)
> 
>>> Personally, password security is perfectly acceptable to me -- if I were
>>> plotting to overthrow the world perhaps I'd feel differently, but I
>>> don't say a hell of a lot in email that I wouldn't be willing to post
>>> publicly.  I AM unwilling to pay T-Mobile a dime every time I need to
>>> deal with a text message in order to deal with any google product.
>>
>> Your opinion, as mine, is irrelevant >:-P
> 
> I've noticed that...
> 
>> Anyway, the rationale is that Google is working for millions of people,
>> not you, and that for millions of people their email is used to
>> authenticate to many services remotely (say, Amazon, you bank, etc) and
>> in those cases it is better to have secure defaults. It is a fact, so
>> Google claims, that since they forced more secure defaults maybe a year
>> ago successful attacks have been reduced significantly - but I have lost
>> the source for this information.
> 
> It's probably a FALSE lie, as King Mongkut would say.  I'm really tired 
> of a world which is increasingly designed to protect idiots from their 
> own idiocy.
> 
>>> Is there a website that deals with the details of this travesty in 
>>> detail?
> 
> WTF do we need these newfangled "automobiles" for anyway?  A horse was 
> good enough for my pa and it's good enough for me!

:-D


-- 
Cheers, Carlos.

Back to alt.comp.software.thunderbird | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-04 16:57 +0000
  Re: How to recover from Google dropping password support on May 30th 2022 Henk de Jong <newsgroup@nospam-hsdejong.nl> - 2022-03-04 18:55 +0100
    Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 00:17 +0000
  Re: How to recover from Google dropping password support on May 30th 2022 Mike Easter <MikeE@ster.invalid> - 2022-03-04 10:01 -0800
    Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 00:18 +0000
      Re: How to recover from Google dropping password support on May 30th 2022 WaltS48 <schw01@invalid.net> - 2022-03-04 20:22 -0500
        Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 01:38 +0000
          Re: How to recover from Google dropping password support on May 30th 2022 Christian Riechers <chriechers@netscape.net.invalid> - 2022-03-05 13:30 +0100
            Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 15:47 +0000
  Re: How to recover from Google dropping password support on May 30th 2022 Soviet_Mario <SovietMario@CCCP.MIR> - 2022-03-04 19:41 +0100
    Re: How to recover from Google dropping password support on May 30th 2022 PietB <www.godfatherof.nl/@opt-in.invalid> - 2022-03-04 20:41 +0100
  Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-04 21:23 +0100
    Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 12:40 -0800
      Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-04 20:49 +0000
        Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 12:57 -0800
          Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-04 22:10 +0100
            Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 14:39 -0800
              Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-04 23:51 +0100
                Re: How to recover from Google dropping password support on May 30th 2022 Big Al <Bears@invalid.com> - 2022-03-04 17:58 -0500
                Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 15:33 -0800
                Re: How to recover from Google dropping password support on May 30th 2022 Jasen Betts <usenet@revmaps.no-ip.org> - 2022-03-05 01:00 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 WaltS48 <schw01@invalid.net> - 2022-03-04 20:25 -0500
                Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 21:20 -0800
                Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 09:22 +0100
                Re: How to recover from Google dropping password support on May 30th 2022 Jasen Betts <usenet@revmaps.no-ip.org> - 2022-03-05 22:09 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 09:27 +0100
                Re: How to recover from Google dropping password support on May 30th 2022 "Gary R. Schmidt" <grschmidt@acm.org> - 2022-03-05 21:57 +1100
                Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 13:11 +0100
              Re: How to recover from Google dropping password support on May 30th 2022 Nobody <jock@soccer.com> - 2022-03-04 16:18 -0800
              Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 00:55 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 ant@zimage.comANT (Ant) - 2022-03-04 18:57 -0600
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 01:28 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 11:18 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 15:36 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 16:04 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 18:58 +0100
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 18:47 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 21:21 +0100
              Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 11:10 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-06 09:11 -0800
                Re: How to recover from Google dropping password support on May 30th 2022 Paul <nospam@needed.invalid> - 2022-03-06 12:46 -0500
                Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-06 21:23 -0800
          Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-04 21:26 +0000
            Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-04 23:05 +0100
            Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 15:23 -0800
              Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 09:31 +0100
              Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 11:20 +0000
            Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 00:59 +0000
              Re: How to recover from Google dropping password support on May 30th 2022 WaltS48 <schw01@invalid.net> - 2022-03-04 20:27 -0500
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 01:48 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 11:26 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 15:30 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burns <usenet@andyburns.uk> - 2022-03-05 15:39 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 22:37 +0000
                Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-07-23 10:03 +0100
      Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-04 22:07 +0100
        Re: How to recover from Google dropping password support on May 30th 2022 WaltS48 <schw01@invalid.net> - 2022-03-04 16:26 -0500
        Re: How to recover from Google dropping password support on May 30th 2022 The Real Bev <bashley101@gmail.com> - 2022-03-04 14:15 -0800
          Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 00:00 +0100
        Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 01:05 +0000
          Re: How to recover from Google dropping password support on May 30th 2022 "Carlos E.R." <robin_listas@es.invalid> - 2022-03-05 09:39 +0100
            Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 15:24 +0000
    Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 00:19 +0000
    Re: How to recover from Google dropping password support on May 30th 2022 Andy Burnelli <spam@nospam.com> - 2022-03-05 01:02 +0000

csiph-web