Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

news: gotcha


computers / alt.comp.os.windows-10 / Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

SubjectAuthor
* Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Andy Burnelli
+* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
|+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?YK
|`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
| `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  +* Re: Does this bug in Google GMail OAuth affect us on Firefox &Chris
|  |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?dan
|  ||`- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Gronk
|  | |`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  | `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |  +* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
|  |  |`- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  |   `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |    `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  |     `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?RonTheGuy
`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 +* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &Sam Hill
 |||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?CDB
 |||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 |||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Hiram T Schwantz
 ||| `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?J.B. Wood
 ||`* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Heron
 || |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || | `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?allen
 || |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || |   `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?allen
 || |    `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||  +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Thomas
 ||  |`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||   +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?John Robertson
 ||   `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?mike
 ||    |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    | `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?wolfgang kern
 ||    |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    |   `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?John
 ||    `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||     `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||      +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Rudolph Rhein
 ||      `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||       `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||        `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         +* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||||+- Re: Does this bug in Google GMail OAuth affect us on Firefox &jjb
 ||         |||||`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         |||| `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         |||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         ||| `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||  `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |||   `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
 ||         ||   +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||   `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Ken Blake
 ||         || |`- Re: Does this bug in Google GMail OAuth affect us on Firefox &...winston
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||  +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||  `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on FirefoxAdam H. Kerman
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?RJH
 ||         || |`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || | `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 ||         ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||   `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 ||         |`* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         | `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |  `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||          +- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||          `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||           `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||            `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||             `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 |`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?FromTheRafters
 | |+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 | |`* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
 | | +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?JAB
 | | `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Frank Slootweg
 | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Algernon Goss-Custard
 | `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Jerry

Pages:12345678910
Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6g83c$29spe$1@paganini.bofh.team>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62863&group=alt.comp.os.windows-10#62863

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!paganini.bofh.team!not-for-mail
From: all...@spam.com (allen)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 08:09:56 -0700
Organization: To protect and to server
Message-ID: <t6g83c$29spe$1@paganini.bofh.team>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e3el$6mp$1@gioia.aioe.org> <t6e9ba$hf5$3@gioia.aioe.org> <t6ellt$22rf6$1@paganini.bofh.team> <t6fdee$10f2$3@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 23 May 2022 15:09:33 -0000 (UTC)
Injection-Info: paganini.bofh.team; logging-data="2421550"; posting-host="MwDp4cg29rhHPtc3Q1kooA.user.paganini.bofh.team"; mail-complaints-to="usenet@bofh.team";
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0
Content-Language: en-GB
X-Notice: Filtered by postfilter v. 0.9.1
 by: allen - Mon, 23 May 2022 15:09 UTC

"R.Wieser" <address@not.available> said:

> I tried to answer to the OP by (again) nudging him to learn to fish for
> himself.

You bullshit us.
You're nothing but a whiny little bitch.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6g8f0$1sa0$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62864&group=alt.comp.os.windows-10#62864

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!QCiEG2yZwKrSNvfSDGS2fg.user.46.165.242.75.POSTED!not-for-mail
From: erra...@nomail.afraid.org (FromTheRafters)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 10:16:08 -0500
Organization: Peripheral Visions
Message-ID: <t6g8f0$1sa0$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: gioia.aioe.org; logging-data="61760"; posting-host="QCiEG2yZwKrSNvfSDGS2fg.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-ICQ: 1701145376
X-Notice: Filtered by postfilter v. 0.9.2
X-Newsreader: MesNews/1.08.06.00-gb
 by: FromTheRafters - Mon, 23 May 2022 15:16 UTC

Chris used his or her keyboard to write :

> OAuth has been around a long time and proven itself as reliable and secure.

It's not reliable.
It's not secure.

Didn't Andy Burns long ago show so with a long conference link explaining
why OAuth is neither reliable nor secure said by the OAuth author himself?

Besides, if it was secure and reliable, why does this vulnerability exist?

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gakl$ft5$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62867&group=alt.comp.os.windows-10#62867

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ahk...@chinet.com (Adam H. Kerman)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 15:52:53 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 25
Message-ID: <t6gakl$ft5$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <t6g8f0$1sa0$1@gioia.aioe.org>
Injection-Date: Mon, 23 May 2022 15:52:53 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="b2863c144473bd42ca995eb20e90ab4a";
logging-data="16293"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18Qrqzt33r0LL0ujRUWY9FtS55CL2A3ntE="
Cancel-Lock: sha1:WRd3cb2Rm0n2RAkgpnbJ649QrYg=
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
 by: Adam H. Kerman - Mon, 23 May 2022 15:52 UTC

FromTheRafters <erratic@nomail.afraid.org> wrote:
>Chris used his or her keyboard to write :

>>OAuth has been around a long time and proven itself as reliable and secure.

>It's not reliable.
>It's not secure.

>Didn't Andy Burns long ago show so with a long conference link explaining
>why OAuth is neither reliable nor secure said by the OAuth author himself?

>Besides, if it was secure and reliable, why does this vulnerability exist?

Oh, for fuck's sake. Did you read the Web page cited in the root article
of this very thread?

https://ysamm.com/?p=763

Facebook uses a combination of insecure-by-design methods -- Iframe and
XSS -- that allow the third-party OAuth token from Google to be stolen.
There is no OAuth vulnerability. It's the nature of a token.

It's like authorizing access with a security module that has been plugged
into the correct physical port on behalf of the end user. It's the security
module being authorized, not the end user.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<Bp4jDgHID7iiFwxn@invalid.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62868&group=alt.comp.os.windows-10#62868

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ben...@nowhere.com (Algernon Goss-Custard)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 17:05:28 +0100
Organization: A noiseless patient Spider
Lines: 59
Message-ID: <Bp4jDgHID7iiFwxn@invalid.com>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain;charset=us-ascii;format=flowed
Injection-Info: reader02.eternal-september.org; posting-host="5fc1fcacaa50be6b01e9e003f2cd0c33";
logging-data="32563"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX194zOsO4aLU7AbTlFFcxwj/Y6dDWxbRtwM="
User-Agent: Turnpike/6.06-U (<WAAfssCaxGPwsqvSkV5qpljXpx>)
Cancel-Lock: sha1:Nd0qPgKS7jdIHQLL9aM2Tthhxu4=
 by: Algernon Goss-Custar - Mon, 23 May 2022 16:05 UTC

Chris <ithinkiam@gmail.com> posted
>The Real Bev <bashley101@gmail.com> wrote:
>> On 05/22/2022 03:42 AM, R.Wieser wrote:
>>> Andy,
>>>
>>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
>>>
>>> There is a problem with a road in my city. Do you think that it will affect
>>> us that are driving a Ford or Chrysler ?
>>>
>>>
>>> The article you provided doesn't name /any/ kind of browser. Ask yourself
>>>> Why not ?
>>
>> That's needlessly snotty.
>>
>> Some/many of us regard the security of our email as largely irrelevant
>> because we assume that anything we put on the internet is public
>> information anyway. If username+password is the equivalent of a
>> motorcycle air cleaner that filters out birds we're OK with that.
>>
>> We are now, however, forced to pay attention to google's upcoming
>> requirement of OAuth2 rather than the username+password that we have
>> been satisfied with for decades.
>
>I'm not sure I understand why you think it's so different? It's still a
>username and password just via a different mechanism that is largely hidden
>from the user.

The reason *I* think it's different is because it might not work on 31st
May, whereas the POP3 method I use now *does* work.

The consequences if it doesn't will be very unpleasant. There are zero
benefits to me of oAuth or app passwords. The set-up I have is perfectly
adequate and secure.

>
>I moved mine and my FIL's thunderbird to it years ago to avoid the really
>clunky app passwords.
>
>OAuth has been around a long time and proven itself as reliable and secure.
>
>
>> The available instructions about what changes to our desktop
>> browsers/email programs are both lacking and contradictory.
>
>Try here
>https://support.mozilla.org/en-US/kb/thunderbird-and-gmail

That page exemplifies precisely what TRB means. It explicitly says that
oAuth is required as of May 30, 2022, whereas other pages (including
some from Google) do not say that, they say or imply that app passwords
will continue to work with POP3. Andy Burns has also said on
alt.comp.software.thunderbird that POP3 isn't being disabled. I do not
know who to believe.

--
Algernon

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gce4$1rmn$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62869&group=alt.comp.os.windows-10#62869

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!2iPs8S3v4YCPcSyaRykvSQ.user.46.165.242.75.POSTED!not-for-mail
From: nos...@nospam.com (dan)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 14:23:56 -0200
Organization: Aioe.org NNTP Server
Message-ID: <t6gce4$1rmn$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Info: gioia.aioe.org; logging-data="61143"; posting-host="2iPs8S3v4YCPcSyaRykvSQ.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Thoth/1.9.0 (Mac OS X)
X-Notice: Filtered by postfilter v. 0.9.2
 by: dan - Mon, 23 May 2022 16:23 UTC

On Mon, 23 May 2022 15:22:21 +0100, Chris wrote:

> Yup. It introduces a single point of failure. So I prefer not to use it.

There's probably a good reason Google & Facebook want you to use it though.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6geh2$t9a$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62874&group=alt.comp.os.windows-10#62874

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 18:20:57 +0200
Organization: Aioe.org NNTP Server
Lines: 48
Message-ID: <t6geh2$t9a$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6g2v8$106dk$1@solani.org>
Injection-Info: gioia.aioe.org; logging-data="29994"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Notice: Filtered by postfilter v. 0.9.2
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-RFC2646: Format=Flowed; Response
 by: R.Wieser - Mon, 23 May 2022 16:20 UTC

Mike,

> Twenty posts and you still haven't said anything of use for the topic.

I answered the OP, asking him to try to make a logic conclusion. I've not
seen him - or anyone else here for that matter - try to do so. For me
the story ends there.

Oh by the way, I have three answers : "yes", "no" and "no" - depending on
where you stand.

Think about that for a minute. If I can come up with three, surely one of
you can come up with just one ? It doesn't need to be *the* answer (if
there is one), but at least it show that *someone* (you?) is prepared to put
some effort into it.

> You endlessly resentfully whine about someone else who asked a question.

:-) I see that comprehensive reading is not quite your thing. I've been
responding to several people who, one after the other, complained to me
about how I replied to the OP or want that I do their figuring-it-out work
for for them.

.... And you are just the next one bitching while not bringing anything of
value to the table - to the OP or me.

> And then you posted ceaselessly about your personal rantings of envy.
> Do everyone a favor and STFU if all you want to say is you're jealous.

Envy ? Jealous ? Of what ?

The OP being able to ask a question that he should be able to answer himself
? His past convoluted, unfollowable, sometimes incomplete and even
downright dangerous "tutorials" ? His ranting and attacking of people with
actual knowledge about the subject in the tutorial when they didn't agree
with him ? Him being shit-binned by those people ? His current spamming
of a slew of newsgroups with his newsest product ? Something else ?

Nahhh, nothing to be envious or jealous about I'm afraid.

Though I get the feeling some of you might be jealous of me. I gave a hint
that I knew what the answer would/could be - which is more than any of you
seem to have.

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6geh4$t9a$2@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62875&group=alt.comp.os.windows-10#62875

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 18:34:38 +0200
Organization: Aioe.org NNTP Server
Lines: 15
Message-ID: <t6geh4$t9a$2@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me>
Injection-Info: gioia.aioe.org; logging-data="29994"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-Priority: 3
X-MSMail-Priority: Normal
X-Notice: Filtered by postfilter v. 0.9.2
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-RFC2646: Format=Flowed; Response
 by: R.Wieser - Mon, 23 May 2022 16:34 UTC

Chris,

> Yup. It introduces a single point of failure. So I prefer not to use it.

:-) That is not a reason you mentioned before.

But true. Than again, so is a browsers auto-fill-in feature - especially
when the browser, for your security ofcourse, encodes the names and
passwords when it stores them. And ofcourse the same is true for most any
other software which is used in its place.

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6geh4$t9a$3@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62876&group=alt.comp.os.windows-10#62876

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 18:46:27 +0200
Organization: Aioe.org NNTP Server
Lines: 19
Message-ID: <t6geh4$t9a$3@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e3el$6mp$1@gioia.aioe.org> <t6e9ba$hf5$3@gioia.aioe.org> <t6ellt$22rf6$1@paganini.bofh.team> <t6fdee$10f2$3@gioia.aioe.org> <t6g83c$29spe$1@paganini.bofh.team>
Injection-Info: gioia.aioe.org; logging-data="29994"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-RFC2646: Format=Flowed; Original
X-Priority: 3
X-MSMail-Priority: Normal
X-Notice: Filtered by postfilter v. 0.9.2
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
 by: R.Wieser - Mon, 23 May 2022 16:46 UTC

Allen,

> You bullshit us.

Are you trying to goad me into telling you what you want to know this way ?
Sorry, doesn't work.

> You're nothing but a whiny little bitch.

:-) Do you know the story about the pot calling the kettle black ? You
should read it some time.

Bottom line, all I see is you whining about how someone else is, according
to you, whining. Funny, isn't it ?

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf1u3qFelgjU2@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62878&group=alt.comp.os.windows-10#62878

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 18:20:58 +0100
Lines: 15
Message-ID: <jf1u3qFelgjU2@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6g8f0$1sa0$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net uk5g2/gr+IRbIQhIvtYvewzmNOufdVR79dasIQT/AIGa6SRIBy
Cancel-Lock: sha1:ytcWVm3lEzIkbvdubasHTdWUcqE=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6g8f0$1sa0$1@gioia.aioe.org>
 by: Andy Burns - Mon, 23 May 2022 17:20 UTC

FromTheRafters wrote:

> Didn't Andy Burns long ago show so with a long conference link explaining
> why OAuth is neither reliable nor secure said by the OAuth author himself?

Well remembered

<https://vimeo.com/52882780>

though for what seems to be petty/stupid reasons they now require a login to
stream it, but the download link still works and plays in e.g. VLC

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gg8v$1ogs$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62879&group=alt.comp.os.windows-10#62879

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!30TGFByyy6c9n/lx7r9EfQ.user.46.165.242.75.POSTED!not-for-mail
From: her...@is.invalid (JAB)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 12:29:27 -0500
Organization: Aioe.org NNTP Server
Message-ID: <t6gg8v$1ogs$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <t6g8f0$1sa0$1@gioia.aioe.org> <jf1u3qFelgjU2@mid.individual.net>
Reply-To: JAB <here@is.invalid>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="57884"; posting-host="30TGFByyy6c9n/lx7r9EfQ.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: ForteAgent/8.00.32.1272
X-Notice: Filtered by postfilter v. 0.9.2
 by: JAB - Mon, 23 May 2022 17:29 UTC

On Mon, 23 May 2022 18:20:58 +0100, Andy Burns <usenet@andyburns.uk> wrote:

> FromTheRafters wrote:
>
>> Didn't Andy Burns long ago show so with a long conference link explaining
>> why OAuth is neither reliable nor secure said by the OAuth author himself?
>
> Well remembered
>
> <https://vimeo.com/52882780>
>
> though for what seems to be petty/stupid reasons they now require a login to
> stream it, but the download link still works and plays in e.g. VLC

That link to the vimeo works for me without needing any login credentials.
It's devastating what Eran Hammer honestly says about those oauth flaws.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6ggf6$1re1$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62880&group=alt.comp.os.windows-10#62880

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!5UT1/jVo0H4f+CGUqir54w.user.46.165.242.75.POSTED!not-for-mail
From: nowh...@nospicedham.never.at (wolfgang kern)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 19:32:46 +0200
Organization: Aioe.org NNTP Server
Message-ID: <t6ggf6$1re1$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6g2v8$106dk$1@solani.org> <t6geh2$t9a$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: gioia.aioe.org; logging-data="60865"; posting-host="5UT1/jVo0H4f+CGUqir54w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:86.0) Gecko/20100101 Thunderbird/86.0
X-Notice: Filtered by postfilter v. 0.9.2
 by: wolfgang kern - Mon, 23 May 2022 17:32 UTC

On 23.05.2022 18:20, R.Wieser wrote:

> Though I get the feeling some of you might be jealous of me.

Nobody is jealous of an idiot like you.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6ggp6$1d5p3$1@news.mixmin.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62881&group=alt.comp.os.windows-10#62881

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!news.mixmin.net!.POSTED!not-for-mail
From: inva...@invalid.invalid (Gronk)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 11:38:06 -0600
Organization: 2.0
Message-ID: <t6ggp6$1d5p3$1@news.mixmin.net>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me> <t6geh4$t9a$2@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 23 May 2022 17:37:42 -0000 (UTC)
Injection-Info: news.mixmin.net; posting-host="6b8e29dc587fd26a387a39d2033e2af81c148dbd";
logging-data="1480483"; mail-complaints-to="abuse@mixmin.net"
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.4
 by: Gronk - Mon, 23 May 2022 17:38 UTC

R.Wieser wrote:

> Than again, so is a browsers auto-fill-in feature - especially
> when the browser, for your security ofcourse, encodes the names and
> passwords when it stores them.

Some browsers were caught sending to the web server everything, even
accidentally typed other passwords that were supposed to be deleted by you
before you pressed the submit button to correct them.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf1v3uFelgjU4@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62882&group=alt.comp.os.windows-10#62882

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 18:38:06 +0100
Lines: 8
Message-ID: <jf1v3uFelgjU4@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net lLvrjfGU5Ip0Z/E1x5gNfAaqSHV4xmKztO58BLM7bmTPntzpuC
Cancel-Lock: sha1:FAq5tivUxmWHF97AU7sCANNF4CA=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <Bp4jDgHID7iiFwxn@invalid.com>
 by: Andy Burns - Mon, 23 May 2022 17:38 UTC

Algernon Goss-Custard wrote:

> That page exemplifies precisely what TRB means. It explicitly says that oAuth is
> required as of May 30, 2022

Unfortunately that's wrong ...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gi6c$lgi$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62884&group=alt.comp.os.windows-10#62884

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Mon, 23 May 2022 18:01:48 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 70
Message-ID: <t6gi6c$lgi$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 23 May 2022 18:01:48 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="723282cf06937f938d53ea18522df437";
logging-data="22034"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18ManvRoDVDP4ZQQ0k0Rn399lWhzotj5kU="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:hRRPyeRj8mMcgXD9XDFmpD5IAuc=
sha1:iBiKxg5VjT8go+KEY310DOUUrSI=
 by: Chris - Mon, 23 May 2022 18:01 UTC

Algernon Goss-Custard <Ben@nowhere.com> wrote:
> Chris <ithinkiam@gmail.com> posted
>> The Real Bev <bashley101@gmail.com> wrote:
>>> On 05/22/2022 03:42 AM, R.Wieser wrote:
>>>> Andy,
>>>>
>>>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
>>>>
>>>> There is a problem with a road in my city. Do you think that it will affect
>>>> us that are driving a Ford or Chrysler ?
>>>>
>>>>
>>>> The article you provided doesn't name /any/ kind of browser. Ask yourself
>>>>> Why not ?
>>>
>>> That's needlessly snotty.
>>>
>>> Some/many of us regard the security of our email as largely irrelevant
>>> because we assume that anything we put on the internet is public
>>> information anyway. If username+password is the equivalent of a
>>> motorcycle air cleaner that filters out birds we're OK with that.
>>>
>>> We are now, however, forced to pay attention to google's upcoming
>>> requirement of OAuth2 rather than the username+password that we have
>>> been satisfied with for decades.
>>
>> I'm not sure I understand why you think it's so different? It's still a
>> username and password just via a different mechanism that is largely hidden
>> from the user.
>
> The reason *I* think it's different is because it might not work on 31st
> May, whereas the POP3 method I use now *does* work.

POP3 with OAUTH works today. Why would it stop next week?

> The consequences if it doesn't will be very unpleasant. There are zero
> benefits to me of oAuth or app passwords. The set-up I have is perfectly
> adequate and secure.

The benefit is that your email client will continue to work. Why is that
not enough of an incentive?

>>
>> I moved mine and my FIL's thunderbird to it years ago to avoid the really
>> clunky app passwords.
>>
>> OAuth has been around a long time and proven itself as reliable and secure.
>>
>>
>>> The available instructions about what changes to our desktop
>>> browsers/email programs are both lacking and contradictory.
>>
>> Try here
>> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
>
> That page exemplifies precisely what TRB means. It explicitly says that
> oAuth is required as of May 30, 2022, whereas other pages (including
> some from Google) do not say that, they say or imply that app passwords
> will continue to work with POP3.

I don't see how. Google explicitly says app passwords are disappearing. It
doesn't matter whether it's POP or IMAP.

> Andy Burns has also said on
> alt.comp.software.thunderbird that POP3 isn't being disabled. I do not
> know who to believe.

You're confusing authentication with email protocol. Only one of them is
changing.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gpev.cfk.1@ID-201911.user.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62885&group=alt.comp.os.windows-10#62885

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!news.uzoreto.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: thi...@ddress.is.invalid (Frank Slootweg)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: 23 May 2022 18:05:59 GMT
Organization: NOYB
Lines: 69
Message-ID: <t6gpev.cfk.1@ID-201911.user.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <Bp4jDgHID7iiFwxn@invalid.com>
X-Trace: individual.net D0JyPMzqiEJaBkpGMriqewkSTw9njS6JJef4eynurcimqOzKGS
X-Orig-Path: not-for-mail
Cancel-Lock: sha1:G1ArOG0HEE0pIwKO9kNQcQjOuso=
User-Agent: tin/1.6.2-20030910 ("Pabbay") (UNIX) (CYGWIN_NT-6.3-WOW/2.8.0(0.309/5/3) (i686)) Hamster/2.0.2.2
X-Antivirus: Avast (VPS 220523-6, 5/23/2022), Outbound message
X-Antivirus-Status: Clean
 by: Frank Slootweg - Mon, 23 May 2022 18:05 UTC

Algernon Goss-Custard <Ben@nowhere.com> wrote:
> Chris <ithinkiam@gmail.com> posted
> >The Real Bev <bashley101@gmail.com> wrote:
> >> On 05/22/2022 03:42 AM, R.Wieser wrote:
> >>> Andy,
> >>>
> >>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
> >>>
> >>> There is a problem with a road in my city. Do you think that it will affect
> >>> us that are driving a Ford or Chrysler ?
> >>>
> >>>
> >>> The article you provided doesn't name /any/ kind of browser. Ask yourself
> >>>> Why not ?
> >>
> >> That's needlessly snotty.
> >>
> >> Some/many of us regard the security of our email as largely irrelevant
> >> because we assume that anything we put on the internet is public
> >> information anyway. If username+password is the equivalent of a
> >> motorcycle air cleaner that filters out birds we're OK with that.
> >>
> >> We are now, however, forced to pay attention to google's upcoming
> >> requirement of OAuth2 rather than the username+password that we have
> >> been satisfied with for decades.
> >
> >I'm not sure I understand why you think it's so different? It's still a
> >username and password just via a different mechanism that is largely hidden
> >from the user.
>
> The reason *I* think it's different is because it might not work on 31st
> May, whereas the POP3 method I use now *does* work.
>
> The consequences if it doesn't will be very unpleasant. There are zero
> benefits to me of oAuth or app passwords. The set-up I have is perfectly
> adequate and secure.
>
> >
> >I moved mine and my FIL's thunderbird to it years ago to avoid the really
> >clunky app passwords.
> >
> >OAuth has been around a long time and proven itself as reliable and secure.
> >
> >
> >> The available instructions about what changes to our desktop
> >> browsers/email programs are both lacking and contradictory.
> >
> >Try here
> >https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
>
> That page exemplifies precisely what TRB means. It explicitly says that
> oAuth is required as of May 30, 2022, whereas other pages (including
> some from Google) do not say that, they say or imply that app passwords
> will continue to work with POP3. Andy Burns has also said on
> alt.comp.software.thunderbird that POP3 isn't being disabled. I do not
> know who to believe.

FWIW, I am in The Netherlands (EU/Europe) and have not gotten any
notifications for our (four) Google/Gmail accounts, so I don't think
either POP3 access to Gmail, nor (Google) App Passwords [1] use for
Gmail (as opposed to OAuth2) are going away anytime soon. (I do use POP3
with App Passwords in Thunderbird.)

AFAIK, the - non-notification - situation is the same in other
EU/European countries, but perhaps some of the EU/European regulars can
confirm.

[1] Yes, App Passwords require 2-Step Verification to be on in the
Google Account.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6goka.cfk.1@ID-201911.user.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62886&group=alt.comp.os.windows-10#62886

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!news.uzoreto.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: thi...@ddress.is.invalid (Frank Slootweg)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: 23 May 2022 18:05:59 GMT
Organization: NOYB
Lines: 14
Message-ID: <t6goka.cfk.1@ID-201911.user.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <t6g8f0$1sa0$1@gioia.aioe.org> <jf1u3qFelgjU2@mid.individual.net>
X-Trace: individual.net rKQkKBfiw3LsvuT+jsyY5geeMeLrZ9E20XJ1dFTx4+H9zKDIg1
X-Orig-Path: not-for-mail
Cancel-Lock: sha1:S7LlD47ZUzz9XWHM13pwCycUzUQ=
User-Agent: tin/1.6.2-20030910 ("Pabbay") (UNIX) (CYGWIN_NT-6.3-WOW/2.8.0(0.309/5/3) (i686)) Hamster/2.0.2.2
X-Antivirus: Avast (VPS 220523-6, 5/23/2022), Outbound message
X-Antivirus-Status: Clean
 by: Frank Slootweg - Mon, 23 May 2022 18:05 UTC

Andy Burns <usenet@andyburns.uk> wrote:
> FromTheRafters wrote:
>
> > Didn't Andy Burns long ago show so with a long conference link explaining
> > why OAuth is neither reliable nor secure said by the OAuth author himself?
>
> Well remembered
>
> <https://vimeo.com/52882780>
>
> though for what seems to be petty/stupid reasons they now require a login to
> stream it, but the download link still works and plays in e.g. VLC

Nah, they don't "require a login", you can just login with Google! :-)

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gigt$o0i$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62887&group=alt.comp.os.windows-10#62887

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Mon, 23 May 2022 18:07:25 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 16
Message-ID: <t6gigt$o0i$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<jeu4vcFn4l8U1@mid.individual.net>
<t6fc18$j8j$2@dont-email.me>
<t6fe00$1862$1@gioia.aioe.org>
<t6g5at$agj$1@dont-email.me>
<t6geh4$t9a$2@gioia.aioe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 23 May 2022 18:07:25 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="723282cf06937f938d53ea18522df437";
logging-data="24594"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+6E/UNjpRlyMteiaUgZwLBKIkm2ciF5ic="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:LA8IZjHrQ7xpuoxdCB+uDuB1gLI=
sha1:K04khTRn1Bng0WdoJ6/1jcV9ddo=
 by: Chris - Mon, 23 May 2022 18:07 UTC

R.Wieser <address@not.available> wrote:
> Chris,
>
>> Yup. It introduces a single point of failure. So I prefer not to use it.
>
> :-) That is not a reason you mentioned before.
>
> But true. Than again, so is a browsers auto-fill-in feature - especially
> when the browser, for your security ofcourse, encodes the names and
> passwords when it stores them. And ofcourse the same is true for most any
> other software which is used in its place.

We all have to make our own judgements. I prefer to use a password manager
that is under my control (i.e. not the browser one) and separate password
mechanisms, rather than the same password mechanism across multiple sites.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gigu$o0i$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62888&group=alt.comp.os.windows-10#62888

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Mon, 23 May 2022 18:07:26 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 10
Message-ID: <t6gigu$o0i$2@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<jeu4vcFn4l8U1@mid.individual.net>
<t6fc18$j8j$2@dont-email.me>
<t6fe00$1862$1@gioia.aioe.org>
<t6g5at$agj$1@dont-email.me>
<t6gce4$1rmn$1@gioia.aioe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 23 May 2022 18:07:26 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="723282cf06937f938d53ea18522df437";
logging-data="24594"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+88ZOv6Iv7HQl1jLRJ1+PWgIj3wZ3cdUI="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:H7Szj4ug//oVUYbTnuhkgJkoycQ=
sha1:aNOUofku5pXIMmZ4iMGrE8jklrY=
 by: Chris - Mon, 23 May 2022 18:07 UTC

dan <nospam@nospam.com> wrote:
> On Mon, 23 May 2022 15:22:21 +0100, Chris wrote:
>
>
>> Yup. It introduces a single point of failure. So I prefer not to use it.
>
> There's probably a good reason Google & Facebook want you to use it though.

Data. Obviously.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf2247FelgjU5@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62889&group=alt.comp.os.windows-10#62889

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 19:29:27 +0100
Lines: 21
Message-ID: <jf2247FelgjU5@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net j85C4yuSC5Sk7Yj3X6RIsAnq8y4Eou3myyh84chapMGpFr7IGq
Cancel-Lock: sha1:spHbq1bOFtz21W9IJf0qHUrkjfc=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <Bp4jDgHID7iiFwxn@invalid.com>
 by: Andy Burns - Mon, 23 May 2022 18:29 UTC

Algernon Goss-Custard wrote:

> There are zero benefits to me of oAuth or app passwords. The set-up I have is
> perfectly adequate and secure.

The benefit is that your main google password and your email-only password are
separated, and the latter (if leaked) can't be used to modify your google
account, if gmail is the only google feature you use, then ok you don't gain
anything directly, but you benefit indirectly by there being fewer hacked gmail
accounts sending out spam, remember how bad it got with hacked yahoo accounts
harvesting address books?

> Andy Burns has also said on alt.comp.software.thunderbird that POP3 isn't
> being disabled.

Older thunderbird versions didn't work with POP+OAUTH, only IMAP+OAUTH, but
recent version work with both POP and IMAP, the only thing being disabled is
"insecure apps" by which they mean IMAP/POP without (OAUTH or APP-PASSWORDS)

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf2262FelgjU6@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62890&group=alt.comp.os.windows-10#62890

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 19:30:26 +0100
Lines: 9
Message-ID: <jf2262FelgjU6@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com> <t6gpev.cfk.1@ID-201911.user.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net zkq2mm31RKnkUNFlnhfH1wE1tsEOKSEkJ7LzDd4eR6w/Xn9PJN
Cancel-Lock: sha1:PeBImzU4ATlS7TBv4/S9YpJ7808=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6gpev.cfk.1@ID-201911.user.individual.net>
 by: Andy Burns - Mon, 23 May 2022 18:30 UTC

Frank Slootweg wrote:

> FWIW, I am in The Netherlands (EU/Europe) and have not gotten any
> notifications for our (four) Google/Gmail accounts

They only sent the notification to people who *are* using the method they're
going to disable ...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf22mbFelgjU7@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62891&group=alt.comp.os.windows-10#62891

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 19:39:07 +0100
Lines: 23
Message-ID: <jf22mbFelgjU7@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com> <t6gi6c$lgi$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net hwHT7fY7lEf4YVfqAWM3kQvXkiaQIwe8xv4QXgLig270Ocbu5w
Cancel-Lock: sha1:BvVbOjKZjg77SKPPquoIcYQsuKo=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6gi6c$lgi$1@dont-email.me>
 by: Andy Burns - Mon, 23 May 2022 18:39 UTC

Chris wrote:

> Google explicitly says app passwords are disappearing.

No, they say "insecure apps" are disappearing, "app passwords" are staying.

Notice here, the red warning about less secure apps, yet they still link to app
passwords

<https://support.google.com/accounts/answer/6010255?hl=en>

Or here, where they describe how to enable 2SV if you want to create an app
password, with not a mention that they might be going away anytime soon

<https://support.google.com/accounts/answer/185833?hl=en>

I have no idea how many Google arses you have to lick to become a Diamond or
Platinum Product Expert, but maybe you'll believe them if you don't believe me?

<https://support.google.com/accounts/thread/161738917?hl=en>

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf22rpFelgjU8@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62892&group=alt.comp.os.windows-10#62892

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 19:42:01 +0100
Lines: 11
Message-ID: <jf22rpFelgjU8@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net>
<t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org>
<t6g5at$agj$1@dont-email.me> <t6geh4$t9a$2@gioia.aioe.org>
<t6gigt$o0i$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net hcHPl93ybS0rIfdL2PAHegB3v7fXOxg2E7YAhqXHGugk8ohNEL
Cancel-Lock: sha1:gTi51iRXtpAu+usMGshvKq4MeJ0=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6gigt$o0i$1@dont-email.me>
 by: Andy Burns - Mon, 23 May 2022 18:42 UTC

Chris wrote:

> We all have to make our own judgements. I prefer to use a password manager
> that is under my control (i.e. not the browser one)

That's what I do, most of the time I can logon with a fingerprint to unlock the
password manager, it prompts for the master password *just* often enough to make
sure I don't forget what it is ...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6grou.470.1@ID-201911.user.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62893&group=alt.comp.os.windows-10#62893

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: thi...@ddress.is.invalid (Frank Slootweg)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: 23 May 2022 18:45:24 GMT
Organization: NOYB
Lines: 25
Message-ID: <t6grou.470.1@ID-201911.user.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <Bp4jDgHID7iiFwxn@invalid.com> <t6gi6c$lgi$1@dont-email.me>
X-Trace: individual.net 8APwqlXp7utGhBYNrItXTgZhuEnvHI2EHwyf6xC3hIfI7WXZsw
X-Orig-Path: not-for-mail
Cancel-Lock: sha1:W6MsM7D7N4Wn3JbkKhoT7/VXugU=
User-Agent: tin/1.6.2-20030910 ("Pabbay") (UNIX) (CYGWIN_NT-6.3-WOW/2.8.0(0.309/5/3) (i686)) Hamster/2.0.2.2
X-Antivirus: Avast (VPS 220523-6, 5/23/2022), Outbound message
X-Antivirus-Status: Clean
 by: Frank Slootweg - Mon, 23 May 2022 18:45 UTC

Chris <ithinkiam@gmail.com> wrote:
> Algernon Goss-Custard <Ben@nowhere.com> wrote:
> > Chris <ithinkiam@gmail.com> posted
[...]
> >> Try here
> >> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
> >
> > That page exemplifies precisely what TRB means. It explicitly says that
> > oAuth is required as of May 30, 2022, whereas other pages (including
> > some from Google) do not say that, they say or imply that app passwords
> > will continue to work with POP3.
>
> I don't see how. Google explicitly says app passwords are disappearing. It
> doesn't matter whether it's POP or IMAP.

Where does Google say app passwords are disappearing? I haven't gotten
any such notification and haven't seen such a reference. (Have you
gotton any such notification from Google, you being in Europe and all
that?)

It would be rather stupid for Google to remove the App Password
functionality, because it breaks 'old' (read non-OAuth2) clients for no
good reason.

[...]

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gm2n$ip2$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62895&group=alt.comp.os.windows-10#62895

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 20:55:11 +0200
Organization: Aioe.org NNTP Server
Lines: 20
Message-ID: <t6gm2n$ip2$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6g2v8$106dk$1@solani.org> <t6geh2$t9a$1@gioia.aioe.org> <t6ggf6$1re1$1@gioia.aioe.org>
Injection-Info: gioia.aioe.org; logging-data="19234"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-MSMail-Priority: Normal
X-Notice: Filtered by postfilter v. 0.9.2
X-Priority: 3
X-RFC2646: Format=Flowed; Response
 by: R.Wieser - Mon, 23 May 2022 18:55 UTC

wolfgang,

> Nobody is jealous of an idiot like you.

Oeh, did I push a button there ?

I don't remember you being part of that group who refused to even /try/ to
think for themselves though. And that was - and especially the one trying to
make it sound as if I would be the jealous one - which I was talking to.

Though thank you for letting me know how you feel about me. I'm getting all
warm inside. :-)

But maybe you can spoon-feed them the answer to arlens question. I'm sure
he and the others would be quite gratefull for it.

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gm2o$ip2$2@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62896&group=alt.comp.os.windows-10#62896

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 21:08:01 +0200
Organization: Aioe.org NNTP Server
Lines: 16
Message-ID: <t6gm2o$ip2$2@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me> <t6geh4$t9a$2@gioia.aioe.org> <t6ggp6$1d5p3$1@news.mixmin.net>
Injection-Info: gioia.aioe.org; logging-data="19234"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-MSMail-Priority: Normal
X-RFC2646: Format=Flowed; Response
X-Priority: 3
X-Notice: Filtered by postfilter v. 0.9.2
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
 by: R.Wieser - Mon, 23 May 2022 19:08 UTC

Gronk,

> Some browsers were caught sending to the web server everything, even
> accidentally typed other passwords that were supposed to be deleted by you
> before you pressed the submit button to correct them.

Yeah, I read about that too. Not good at all. But that can happen when
you allow random websites to run as random scripts in your browser.

But using auto-fill-in does mitigate that somewhat. The less sensitive stuff
you have to enter yourself the fewer mistakes you will make with it.

regards,
Rudy Wieser

Pages:12345678910
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor