Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Yes I have a Machintosh, please don't scream at me. -- Larry Blumette on linux-kernel


computers / alt.comp.os.windows-10 / Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

SubjectAuthor
* Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Andy Burnelli
+* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
|+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?YK
|`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
| `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  +* Re: Does this bug in Google GMail OAuth affect us on Firefox &Chris
|  |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?dan
|  ||`- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Gronk
|  | |`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  | `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |  +* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
|  |  |`- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  |   `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  |    `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
|  |     `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
|  `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?RonTheGuy
`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 +* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &Sam Hill
 |||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?CDB
 |||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 |||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Hiram T Schwantz
 ||| `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?J.B. Wood
 ||`* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Heron
 || |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || | `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?allen
 || |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || |   `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?allen
 || |    `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||  +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Thomas
 ||  |`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||   +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?John Robertson
 ||   `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?mike
 ||    |`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    | `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?wolfgang kern
 ||    |  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||    |   `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?John
 ||    `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||     `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||      +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Rudolph Rhein
 ||      `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||       `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||        `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         +* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||||+* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||||+- Re: Does this bug in Google GMail OAuth affect us on Firefox &jjb
 ||         |||||`- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         |||| `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         |||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         ||| `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         |||  `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |||   `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
 ||         ||   +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||   `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Ken Blake
 ||         || |`- Re: Does this bug in Google GMail OAuth affect us on Firefox &...winston
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?nospam
 ||         ||  +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||  `- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |+* Re: Does this bug in Google GMail OAuth affect us on FirefoxAdam H. Kerman
 ||         ||`* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         || +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?RJH
 ||         || |`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         || | `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         || `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 ||         ||  `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||         ||   `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 ||         |`* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         | `* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||         |  `- Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||         `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||          +- Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 ||          `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||           `* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 ||            `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 ||             `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?R.Wieser
 |`* Re: Does this bug in Google GMail OAuth affect us on FirefoxChris
 | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?FromTheRafters
 | |+- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Adam H. Kerman
 | |`* Re: Does this bug in Google GMail OAuth affect us on Firefox &Andy Burns
 | | +- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?JAB
 | | `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Frank Slootweg
 | +* Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Algernon Goss-Custard
 | `* Re: Does this bug in Google GMail OAuth affect us on Firefox &The Real Bev
 `- Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?Jerry

Pages:12345678910
Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gmrl$uc6$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62897&group=alt.comp.os.windows-10#62897

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Mon, 23 May 2022 21:21:19 +0200
Organization: Aioe.org NNTP Server
Lines: 23
Message-ID: <t6gmrl$uc6$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me> <t6geh4$t9a$2@gioia.aioe.org> <t6gigt$o0i$1@dont-email.me>
Injection-Info: gioia.aioe.org; logging-data="31110"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-Notice: Filtered by postfilter v. 0.9.2
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-MSMail-Priority: Normal
X-Priority: 3
X-RFC2646: Format=Flowed; Original
 by: R.Wieser - Mon, 23 May 2022 19:21 UTC

Chris,

> We all have to make our own judgements.

Absolutily.

> I prefer to use a password manager that is under my control (i.e. not the
> browser one)

Can you tell why that that is ? I mean, what does a browser (not) do that
you dislike it.

> and separate password mechanisms, rather than the same password mechanism
> across multiple sites.

Does that mean you got multiple password managers running ? If not, aren't
you than not stil using a single mechanism for all sites - and thus still
have a single point of failure ?

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6go6c$5rj$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62903&group=alt.comp.os.windows-10#62903

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: bashley...@gmail.com (The Real Bev)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 12:44:10 -0700
Organization: None, as usual
Lines: 88
Message-ID: <t6go6c$5rj$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 23 May 2022 19:44:12 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ad8625188e730dc51b05a6d382d25a98";
logging-data="6003"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+BFy1SwlJ5jLXfRnIEzWNa1OegW8U47Z0="
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101
Firefox/38.0 Thunderbird/38.2.0
Cancel-Lock: sha1:nenN3MBA1ReJ+RhfWr9zYVcLeak=
In-Reply-To: <t6fc17$j8j$1@dont-email.me>
 by: The Real Bev - Mon, 23 May 2022 19:44 UTC

On 05/23/2022 12:10 AM, Chris wrote:
> The Real Bev <bashley101@gmail.com> wrote:
>> On 05/22/2022 03:42 AM, R.Wieser wrote:
>>> Andy,
>>>
>>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
>>>
>>> There is a problem with a road in my city. Do you think that it will affect
>>> us that are driving a Ford or Chrysler ?
>>>
>>>
>>> The article you provided doesn't name /any/ kind of browser. Ask yourself
>>>> Why not ?
>>
>> That's needlessly snotty.
>>
>> Some/many of us regard the security of our email as largely irrelevant
>> because we assume that anything we put on the internet is public
>> information anyway. If username+password is the equivalent of a
>> motorcycle air cleaner that filters out birds we're OK with that.
>>
>> We are now, however, forced to pay attention to google's upcoming
>> requirement of OAuth2 rather than the username+password that we have
>> been satisfied with for decades.
>
> I'm not sure I understand why you think it's so different? It's still a
> username and password just via a different mechanism that is largely hidden
> from the user.

Because apparently we will no longer be able to use the uname+pwd on our
computers but must employ OAuth2 which (a) is not available with the
elderly Thunderbird that I love; (b) might or might not require an IMAP
account, which I don't want; and (c) might require sending text
messages to my phone each time I want to check my email or start
Thunderbird or SOMETHING, and which I don't want to have to do because
each goddam text message costs me 1% of my annual cellphone cost. I
don't want to be chained to my cellphone even if there were no cost.
Yeah, I bother to pick up pennies in the street too.

If I'm getting it wrong it's because there is NO authoritative
prescription for dealing with this shit on my linux computer come May 30.

> I moved mine and my FIL's thunderbird to it years ago to avoid the really
> clunky app passwords.
>
> OAuth has been around a long time and proven itself as reliable and secure.

I don't care. It's not available on my preferred version of Thunderbird.

>> The available instructions about what changes to our desktop
>> browsers/email programs are both lacking and contradictory.
>
> Try here
> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail

Easy-peasy, right? The nastiest problem is having to install a new
version of TB. BTW, TB38 doesn't support OAuth2, although the above
says that V31 and older do not. I will NOT write over my current
version of TB, but will run the new version completely separately after
having copied over my profile to the new profile. Not sure if that will
cause damage, but right now using newer TB facilities for importing
current settings, passwords, addressbook etc. do NOT work reliably.
Moreover, the newer addressbook displays are hopelessly ugly and
wasteful of space.

Still, maybe it will indeed be easy. We'll see.

>> Some/many of us are not computer security experts. We expect the
>> professionals to deal with this shit, not lay it on our shoulders. I'm
>> most worried about having to establish new unwanted IMAP accounts (which
>> I don't want to begin with) and notifying nearly 3 decades of entities
>> of the new account names.
>
> That's unnecessary and won't happen.

We'll see. It all depends on whether or not I will need to be
constantly feeding in codes.

>> Google has NOT provided explanations for desktop computer users, only
>> phone users. This seems... irresponsible. And it seems tacky to dump
>> on someone with a question about something that MIGHT affect us and
>> which, so far, has NOT been explained to non-tech people.

--
Cheers, Bev
I'd tell you a UDP joke, but you might not get it.
-- K.E. Long

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6gp1q$cet$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62904&group=alt.comp.os.windows-10#62904

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: bashley...@gmail.com (The Real Bev)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 12:58:48 -0700
Organization: None, as usual
Lines: 55
Message-ID: <t6gp1q$cet$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org>
<t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org>
<t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 23 May 2022 19:58:50 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ad8625188e730dc51b05a6d382d25a98";
logging-data="12765"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18cCrmSXs7zD7/UdrXfLzMCsa70+Ar/+s0="
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101
Firefox/38.0 Thunderbird/38.2.0
Cancel-Lock: sha1:Ob8iJ6LjpGBTIqFg6k5X0uj7+TM=
In-Reply-To: <t6fdee$10f2$2@gioia.aioe.org>
 by: The Real Bev - Mon, 23 May 2022 19:58 UTC

On 05/23/2022 12:27 AM, R.Wieser wrote:
> Bev,
>
>>> FYI: I /have/ read thru a number of his past tutorials.
>>
>> So have I. That's why I feel guilty. Do you NOT believe he's trying to
>> help?
>
> As I already wrote, no, I don't. As far as I can tell it /at best/ comes at
> second place.
>
>> I've read -- and edited -- a lot of manuals/instructions that were just
>> WRONG. If I'm not willing to fix something myself I have to rely on those
>> who claim to have attempted to solve the problem.
>
> After having read the abslolute unreadable, unfollowable and by times
> dangerous to ones computers health garbage arlen posted in the past I'm not
> wiling to suggest them to even my worst enemy (and yes, I have told him
> that).
>
> Even though at first glance his current tutorial looks at least readable,
> arlens current confusion in regard to the article he posted a link to and
> which lead upto his current question doesn't give me any confidence that the
> quality of it has improved.
>
>> I've watched good newsgroups die because some asshole insists on dumping
>> on other posters. The accuracy of the dump is irrelevant, it's the
>> disagreeable nature of the dumpage that destroys the group.
>
> You're absolutily right ofcourse. /Everyone/ should have the right to, even
> after being warned about it, bring dangerous substances - guns,
> dissoving-your-flesh acids, drugs - into a classroom and throw/push them
> at/onto others. Its not those kids with a "meh, who cares. Its good for
> /me/" attitude who destroy a class, its the teachers and parents who are
> trying to save their pupils/kids lives by trying to correct the maversant
> who are to blame. Obviously.

OTOH, we're all adults here -- presumably able to recognize bullshit
when we see it. If not, it's OUR problem. Frequent warnings get
ignored. You were a kid once too, don't you remember that? Even after
I had children of my own my grandmother warned me not to touch the hot
stove. I tried to NOT do stuff like that with my own sprouts.

As far back as I can remember I have assumed that people have both the
right and the obligation to take care of themselves -- even children,
within obvious limits. I'm willing to give advice when I feel it's
useful, but it's up to the receiver whether or not to follow it and I
don't get upset if it's ignored.

I generally don't read the material in question just because of the
quantity.

--
Cheers, Bev
I didn't break it! It was doing that before I broke it... er...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf27hoFgvk7U4@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62905&group=alt.comp.os.windows-10#62905

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 21:02:00 +0100
Lines: 34
Message-ID: <jf27hoFgvk7U4@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net z4iVcosnZ8GAMBUrq0YOBwj5gL5pxWartUwwsLzdBz0vx4+W82
Cancel-Lock: sha1:4cQyP+3vDXAdvb9me55rE43UqAQ=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6go6c$5rj$1@dont-email.me>
 by: Andy Burns - Mon, 23 May 2022 20:02 UTC

The Real Bev wrote:

> Because apparently we will no longer be able to use the uname+pwd on our
> computers

There will still be a way to use uname+pwd without oauth next month, using
app-passwords, it will work with any version of thunderbird that works today,
what it will require is enabling 2 step verification on your google account.

> but must employ OAuth2 which (a) is not available with the elderly
> Thunderbird that I love;

Run old software, miss-out on new features, 'twas ever thus ...

> (b) might or might not require an IMAP account

old thunderbirds support IMAP+oAuth
newer thunderbirds also support POP+oAuth

> which I don't want; and (c) might require sending text messages to my phone
> each time I want to check my email or start Thunderbird or SOMETHING

neither oAuth or app-passwords will require text messages sent to anything
every time you want to read email.

> If I'm getting it wrong it's because there is NO authoritative prescription for
> dealing with this shit on my linux computer come May 30.

Maybe google haven't handled this well, but mainly i just see people flying off
the handle, assuming the sky is falling ...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<hRRiK.4338$45E8.745@fx47.iad>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62906&group=alt.comp.os.windows-10#62906

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!paganini.bofh.team!news.fcku.it!news.uzoreto.com!peer03.ams4!peer.am4.highwinds-media.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx47.iad.POSTED!not-for-mail
From: hiramtsc...@gmail.com (Hiram T Schwantz)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtga$r3e$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
User-Agent: MicroPlanet-Gravity/3.0.10 (GRC)
Lines: 21
Message-ID: <hRRiK.4338$45E8.745@fx47.iad>
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Mon, 23 May 2022 16:08:45 -0400
X-Received-Bytes: 1385
 by: Hiram T Schwantz - Mon, 23 May 2022 20:08 UTC

On Sun, 22 May 2022 17:56:26 -0000 (UTC), Sam Hill posted for all of us to
digest...

>
> On Sun, 22 May 2022 19:32:42 +0200, R.Wieser wrote:
>
> > Bev,
> >
> >> That's needlessly snotty.
> >
> > :-) You have no idea who arlen is, do you ?
>
> Rudy, are you the Holder of that information?
>
> I'd wager you could write a "tutorial" on the subject.

Ha ha bingo

--
Hiram

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6grkl$qj$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62907&group=alt.comp.os.windows-10#62907

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: bashley...@gmail.com (The Real Bev)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 13:42:59 -0700
Organization: None, as usual
Lines: 61
Message-ID: <t6grkl$qj$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 23 May 2022 20:43:01 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ad8625188e730dc51b05a6d382d25a98";
logging-data="851"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+B+4JnZMqCmzs85eKY/ujhYng7T7/FxUg="
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101
Firefox/38.0 Thunderbird/38.2.0
Cancel-Lock: sha1:31pRWSEkefz/gKZiBtxSZ7x72SM=
In-Reply-To: <jf27hoFgvk7U4@mid.individual.net>
 by: The Real Bev - Mon, 23 May 2022 20:42 UTC

On 05/23/2022 01:02 PM, Andy Burns wrote:
>
> The Real Bev wrote:
>
>> Because apparently we will no longer be able to use the uname+pwd on our
>> computers
>
> There will still be a way to use uname+pwd without oauth next month, using
> app-passwords, it will work with any version of thunderbird that works today,
> what it will require is enabling 2 step verification on your google account.
>
>> but must employ OAuth2 which (a) is not available with the elderly
>> Thunderbird that I love;
>
> Run old software, miss-out on new features, 'twas ever thus ...

I rarely see new 'features', only limitations. Consider the loss of the
REAL TabMixPlus for Firefox. None of the substitutes are as good, and
what the author is willing to provide now (uncompensated, I don't blame
him at all) isn't as good as the substitutes. And that's just ONE
extension.

The loss of the .css files in the new Thunderbirds is SERIOUS. Being
able to manipulate ALL fonts individually is really useful, and the .css
files are the only way to do that.

>> (b) might or might not require an IMAP account
>
> old thunderbirds support IMAP+oAuth
> newer thunderbirds also support POP+oAuth
>
>> which I don't want; and (c) might require sending text messages to my phone
>> each time I want to check my email or start Thunderbird or SOMETHING
>
> neither oAuth or app-passwords will require text messages sent to anything
> every time you want to read email.

We'll see. I've seen no authoritative statement to that effect, and
some indications that text messaging is essential to the process.

Some instruction from somewhere within google told me to implement
OAuth2 on my phone, which required receiving a text code on my phone. I
was not given the option of receiving a phone call. Sometimes they have
tried to send texts to my landline which is, of course, useless. I
never want to be required to do anything with my phone(s) in order to
deal with email. If they think a code is necessary I ALWAYS want the
option of receiving a VOICE call on my landline.

>> If I'm getting it wrong it's because there is NO authoritative prescription for
>> dealing with this shit on my linux computer come May 30.
>
> Maybe google haven't handled this well, but mainly i just see people flying off
> the handle, assuming the sky is falling ...

Just being unable to use TB38 is entirely sufficient for me to wish a
painful death upon the appropriate google personnel. There are no
advantages in newer versions that can compensate for what I will lose.

--
Cheers, Bev
I didn't break it! It was doing that before I broke it... er...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf2apfFgvk8U1@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62908&group=alt.comp.os.windows-10#62908

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 21:57:19 +0100
Lines: 26
Message-ID: <jf2apfFgvk8U1@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
<t6grkl$qj$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net +2d5720nuK7AEyDkviMByge+zO/yQU8I0pEAbz7ilIS/uT4wCw
Cancel-Lock: sha1:pds9A9anf/RCByrp10UBGmK80oI=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6grkl$qj$1@dont-email.me>
 by: Andy Burns - Mon, 23 May 2022 20:57 UTC

The Real Bev wrote:

> Just being unable to use TB38 is entirely sufficient for me to wish a painful
> death upon the appropriate google personnel.

How many gmail users are there? 1.8 billion apparently

3/4 of them use gmail via the phone app

I'd guess 2/3 of what's left use the web interface

So maybe 10% using IMAP or POP

How many of those using thunderbird

How many of those under Linux?

How many of those sticking with an old TB version?

And you wonder why they haven't written a guide that's directly applicable to
you? If you creep onto such a specific limb, surely you have have to develop
your own "knack" of knowing what applies, what doesn't and what you have to test
for yourself because you're essentially unique?

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hg6h$1ch0$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62916&group=alt.comp.os.windows-10#62916

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!/DF4Fw3A2wHK8MCMNBsLSg.user.46.165.242.75.POSTED!not-for-mail
From: joh...@nospam.invalid (John)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 04:34:16 +0200
Organization: Aioe.org NNTP Server
Message-ID: <t6hg6h$1ch0$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me> <t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="45600"; posting-host="/DF4Fw3A2wHK8MCMNBsLSg.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0
X-Notice: Filtered by postfilter v. 0.9.2
Content-Language: en-GB
 by: John - Tue, 24 May 2022 02:34 UTC

On Mon, 23 May 2022 21:02:00 +0100, Andy Burns wrote:

> There will still be a way to use uname+pwd without oauth next month, using
> app-passwords, it will work with any version of thunderbird that works today,
> what it will require is enabling 2 step verification on your google account.

That's so Google can get your phone number.

Worse, if you ever disable 2 step verification, then your app passwords
stop working.

Google has this all figured out to get your phone number any way they can.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hg8m$1d1v$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62917&group=alt.comp.os.windows-10#62917

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!/DF4Fw3A2wHK8MCMNBsLSg.user.46.165.242.75.POSTED!not-for-mail
From: joh...@nospam.invalid (John)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 04:35:25 +0200
Organization: Aioe.org NNTP Server
Message-ID: <t6hg8m$1d1v$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6g2v8$106dk$1@solani.org> <t6geh2$t9a$1@gioia.aioe.org> <t6ggf6$1re1$1@gioia.aioe.org> <t6gm2n$ip2$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="46143"; posting-host="/DF4Fw3A2wHK8MCMNBsLSg.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0
Content-Language: en-GB
X-Notice: Filtered by postfilter v. 0.9.2
 by: John - Tue, 24 May 2022 02:35 UTC

On Mon, 23 May 2022 20:55:11 +0200, R.Wieser wrote:

>> Nobody is jealous of an idiot like you.
>
> Oeh, did I push a button there ?

Asshole.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hr9p$uje$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62922&group=alt.comp.os.windows-10#62922

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: bashley...@gmail.com (The Real Bev)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Mon, 23 May 2022 22:43:20 -0700
Organization: None, as usual
Lines: 35
Message-ID: <t6hr9p$uje$2@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
<t6grkl$qj$1@dont-email.me> <jf2apfFgvk8U1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 24 May 2022 05:43:21 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="03a23d8932fd889de64b961f8b9f514e";
logging-data="31342"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19bC0gFBNOvhm8xUrVu9ChKILhQkZ5WH4c="
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101
Firefox/38.0 Thunderbird/38.2.0
Cancel-Lock: sha1:zE4wL3AkHhuWITY+NfX7bgJ9puQ=
In-Reply-To: <jf2apfFgvk8U1@mid.individual.net>
 by: The Real Bev - Tue, 24 May 2022 05:43 UTC

On 05/23/2022 01:57 PM, Andy Burns wrote:
> The Real Bev wrote:
>
>> Just being unable to use TB38 is entirely sufficient for me to wish a painful
>> death upon the appropriate google personnel.
>
> How many gmail users are there? 1.8 billion apparently
>
> 3/4 of them use gmail via the phone app
>
> I'd guess 2/3 of what's left use the web interface
>
> So maybe 10% using IMAP or POP
>
> How many of those using thunderbird
>
> How many of those under Linux?
>
> How many of those sticking with an old TB version?
>
> And you wonder why they haven't written a guide that's directly applicable to
> you? If you creep onto such a specific limb, surely you have have to develop
> your own "knack" of knowing what applies, what doesn't and what you have to test
> for yourself because you're essentially unique?

I am VERY unique!

I feel sorry for all those people who are using suboptimal facilities.
They're probably the people who don't know what options or preferences
are and wouldn't know what to do with them if they did.

--
Cheers, Bev
Giving out free MS security updates is like giving out free
band-aids with flesh-eating microbes in the pads.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hshf$g99$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62925&group=alt.comp.os.windows-10#62925

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!/DF4Fw3A2wHK8MCMNBsLSg.user.46.165.242.75.POSTED!not-for-mail
From: arl_123...@hotmail.com (J.B. Wood)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 01:04:54 -0500
Organization: Aioe.org NNTP Server
Message-ID: <t6hshf$g99$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtga$r3e$1@dont-email.me> <hRRiK.4338$45E8.745@fx47.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="16681"; posting-host="/DF4Fw3A2wHK8MCMNBsLSg.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Thunderbird/78.6.0
X-Notice: Filtered by postfilter v. 0.9.2
Content-Language: en-US
 by: J.B. Wood - Tue, 24 May 2022 06:04 UTC

On 5/23/2022 3:08 PM, Hiram T Schwantz wrote:

> Ha ha bingo

Moron.
--
J. B. Wood e-mail: arl_123734@hotmail.com

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<jf3bk9Fni0rU1@mid.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62926&group=alt.comp.os.windows-10#62926

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!news.uzoreto.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: use...@andyburns.uk (Andy Burns)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox &
Thunderbird?
Date: Tue, 24 May 2022 07:17:43 +0100
Lines: 31
Message-ID: <jf3bk9Fni0rU1@mid.individual.net>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
<t6hg6h$1ch0$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net JjO59zR2ObMYhmVg8y1JPwx8Uyb/MABkYDhXxretQsNc7anhcd
Cancel-Lock: sha1:IOL4tvugLLEZaTtAJyXuBXJwOxo=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101
Thunderbird/101.0
Content-Language: en-GB
In-Reply-To: <t6hg6h$1ch0$1@gioia.aioe.org>
 by: Andy Burns - Tue, 24 May 2022 06:17 UTC

John wrote:

> Andy Burns wrote:
>
>> There will still be a way to use uname+pwd without oauth next month, using
>> app-passwords, it will work with any version of thunderbird that works today,
>> what it will require is enabling 2 step verification on your google account.
>
> That's so Google can get your phone number.

It's so long ago that I used 2SV for the first time, that I can't remember if
giving them your phone number actually *IS* part of the process or not, it's
possible they ask for it to send an SMS message, maybe someone else remembers,
until that point you're spreading FUD.

Certainly in day-to-day operation, 2SV does *NOT* require your phone number to
send SMS messages, it uses a dialog from the phone, linked via the same google
account as the gmail mailbox.

In any case there are alternatives to 2SV, even including printed out one-time
passwords, I'd like to know how that gives google your phone number

> Worse, if you ever disable 2 step verification, then your app passwords
> stop working.

They tell you that.

> Google has this all figured out to get your phone number any way they can.

Watch out of the black helicopters!

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6huba$ht3$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62928&group=alt.comp.os.windows-10#62928

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 06:35:22 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <t6huba$ht3$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<jeu4vcFn4l8U1@mid.individual.net>
<t6fc18$j8j$2@dont-email.me>
<t6fe00$1862$1@gioia.aioe.org>
<t6g5at$agj$1@dont-email.me>
<t6geh4$t9a$2@gioia.aioe.org>
<t6gigt$o0i$1@dont-email.me>
<t6gmrl$uc6$1@gioia.aioe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 06:35:22 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ce4861a188c5753856193048afbc10b5";
logging-data="18339"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18NexOeQFmgvbUqqExRZ48GP4cNonMG4/8="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:HnJo9eq31cCgkksFBb4Qiy6u6bc=
sha1:3kZw2yEOqw+ezTYGi+Kcq6suNkc=
 by: Chris - Tue, 24 May 2022 06:35 UTC

R.Wieser <address@not.available> wrote:
> Chris,
>
>> We all have to make our own judgements.
>
> Absolutily.
>
>> I prefer to use a password manager that is under my control (i.e. not the
>> browser one)
>
> Can you tell why that that is ? I mean, what does a browser (not) do that
> you dislike it.

They weren't terribly secure last I looked - admittedly a long time ago -
and aren't useful for places other than websites. There's less control over
your passwords.

>> and separate password mechanisms, rather than the same password mechanism
>> across multiple sites.
>
> Does that mean you got multiple password managers running ? If not, aren't
> you than not stil using a single mechanism for all sites - and thus still
> have a single point of failure ?

Nope. There's more redundancy with a password manager IMO. Several things
would have to go wrong for me to lose access everywhere.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hukn$jis$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62929&group=alt.comp.os.windows-10#62929

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 06:40:23 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 14
Message-ID: <t6hukn$jis$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com>
<t6gi6c$lgi$1@dont-email.me>
<jf22mbFelgjU7@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 06:40:23 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ce4861a188c5753856193048afbc10b5";
logging-data="20060"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/dX2CkJO1+fUYYBPTz6m1E0fipCT9pLIA="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:iYqXgE+NOd8AME1l726St+dLDAA=
sha1:RTlnYrOFJxRylxP7SAv9HoJiCgo=
 by: Chris - Tue, 24 May 2022 06:40 UTC

Andy Burns <usenet@andyburns.uk> wrote:
> Chris wrote:
>
>> Google explicitly says app passwords are disappearing.
>
> No, they say "insecure apps" are disappearing, "app passwords" are staying.
>
> Notice here, the red warning about less secure apps, yet they still link to app
> passwords
>
> <https://support.google.com/accounts/answer/6010255?hl=en>

ok. Thanks. must have misread it.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hukn$jis$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62930&group=alt.comp.os.windows-10#62930

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 06:40:23 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 31
Message-ID: <t6hukn$jis$2@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com>
<t6gi6c$lgi$1@dont-email.me>
<t6grou.470.1@ID-201911.user.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 06:40:23 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="ce4861a188c5753856193048afbc10b5";
logging-data="20060"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/F47U+OX2xuOnlfkLI/OZqNm86EdehPII="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:MQYpIcrqkn5IwhoPdddRLAXHiQc=
sha1:JJfrBjX/MzzNPC+Z4Z9dWOMhgFc=
 by: Chris - Tue, 24 May 2022 06:40 UTC

Frank Slootweg <this@ddress.is.invalid> wrote:
> Chris <ithinkiam@gmail.com> wrote:
>> Algernon Goss-Custard <Ben@nowhere.com> wrote:
>>> Chris <ithinkiam@gmail.com> posted
> [...]
>>>> Try here
>>>> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
>>>
>>> That page exemplifies precisely what TRB means. It explicitly says that
>>> oAuth is required as of May 30, 2022, whereas other pages (including
>>> some from Google) do not say that, they say or imply that app passwords
>>> will continue to work with POP3.
>>
>> I don't see how. Google explicitly says app passwords are disappearing. It
>> doesn't matter whether it's POP or IMAP.
>
> Where does Google say app passwords are disappearing? I haven't gotten
> any such notification and haven't seen such a reference. (Have you
> gotton any such notification from Google, you being in Europe and all
> that?)

Turns out I was wrong.

> It would be rather stupid for Google to remove the App Password
> functionality, because it breaks 'old' (read non-OAuth2) clients for no
> good reason.

Other than better security?

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hvh9$omr$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62931&group=alt.comp.os.windows-10#62931

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 06:55:37 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 20
Message-ID: <t6hvh9$omr$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me>
<jf27hoFgvk7U4@mid.individual.net>
<t6hg6h$1ch0$1@gioia.aioe.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 06:55:37 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="4c576c2088757c9d120ce7df8aea2756";
logging-data="25307"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18ft88lT3+MCQ4baaD983rL28+NxhFUsdY="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:DzEWVtqGSL2bwY/NVZfJ9coPLSI=
sha1:dokMnueKCCAE6v3/MpFr2nRu6N4=
 by: Chris - Tue, 24 May 2022 06:55 UTC

John <john@nospam.invalid> wrote:
> On Mon, 23 May 2022 21:02:00 +0100, Andy Burns wrote:
>
>> There will still be a way to use uname+pwd without oauth next month, using
>> app-passwords, it will work with any version of thunderbird that works today,
>> what it will require is enabling 2 step verification on your google account.
>
> That's so Google can get your phone number.

Nope. Just use a 2FA app. No phone number shared.

> Worse, if you ever disable 2 step verification, then your app passwords
> stop working.
>
> Google has this all figured out to get your phone number any way they can.

2FA is really good thing as it much harder to hack your account.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6hvtj$r4n$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62932&group=alt.comp.os.windows-10#62932

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 07:02:12 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 41
Message-ID: <t6hvtj$r4n$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me>
<jf27hoFgvk7U4@mid.individual.net>
<t6grkl$qj$1@dont-email.me>
<jf2apfFgvk8U1@mid.individual.net>
<t6hr9p$uje$2@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 07:02:12 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="4c576c2088757c9d120ce7df8aea2756";
logging-data="27799"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+5FUl1NjFrUOdzQVtWVQz0GaOc1bxVWjE="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:e5/BLspy2q+fLQkJfVcBQ5qOa0g=
sha1:myKEG1m2rk9zY1zvKk8BjIV5r7s=
 by: Chris - Tue, 24 May 2022 07:02 UTC

The Real Bev <bashley101@gmail.com> wrote:
> On 05/23/2022 01:57 PM, Andy Burns wrote:
>> The Real Bev wrote:
>>
>>> Just being unable to use TB38 is entirely sufficient for me to wish a painful
>>> death upon the appropriate google personnel.
>>
>> How many gmail users are there? 1.8 billion apparently
>>
>> 3/4 of them use gmail via the phone app
>>
>> I'd guess 2/3 of what's left use the web interface
>>
>> So maybe 10% using IMAP or POP
>>
>> How many of those using thunderbird
>>
>> How many of those under Linux?
>>
>> How many of those sticking with an old TB version?
>>
>> And you wonder why they haven't written a guide that's directly applicable to
>> you? If you creep onto such a specific limb, surely you have have to develop
>> your own "knack" of knowing what applies, what doesn't and what you have to test
>> for yourself because you're essentially unique?
>
> I am VERY unique!
>
> I feel sorry for all those people who are using suboptimal facilities.

What's less optimal than running the risk of losing access to all your
emails?

> They're probably the people who don't know what options or preferences
> are and wouldn't know what to do with them if they did.

Or they understand the consequences of an immovable object meeting an
unstoppable force.

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6i0kb$vef$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62933&group=alt.comp.os.windows-10#62933

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 07:14:19 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 122
Message-ID: <t6i0kb$vef$1@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me>
<t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 07:14:19 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="4c576c2088757c9d120ce7df8aea2756";
logging-data="32207"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19hB412FQIFa6ona5ddLpqqP+4UcZD1ahg="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:o93ZUoE0Ri3CeoskZavTtLxEEJ4=
sha1:hdt1gvI+i4BBXt8pzNfITmxXWZQ=
 by: Chris - Tue, 24 May 2022 07:14 UTC

The Real Bev <bashley101@gmail.com> wrote:
> On 05/23/2022 12:10 AM, Chris wrote:
>> The Real Bev <bashley101@gmail.com> wrote:
>>> On 05/22/2022 03:42 AM, R.Wieser wrote:
>>>> Andy,
>>>>
>>>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
>>>>
>>>> There is a problem with a road in my city. Do you think that it will affect
>>>> us that are driving a Ford or Chrysler ?
>>>>
>>>>
>>>> The article you provided doesn't name /any/ kind of browser. Ask yourself
>>>>> Why not ?
>>>
>>> That's needlessly snotty.
>>>
>>> Some/many of us regard the security of our email as largely irrelevant
>>> because we assume that anything we put on the internet is public
>>> information anyway. If username+password is the equivalent of a
>>> motorcycle air cleaner that filters out birds we're OK with that.
>>>
>>> We are now, however, forced to pay attention to google's upcoming
>>> requirement of OAuth2 rather than the username+password that we have
>>> been satisfied with for decades.
>>
>> I'm not sure I understand why you think it's so different? It's still a
>> username and password just via a different mechanism that is largely hidden
>> from the user.
>
> Because apparently we will no longer be able to use the uname+pwd on our
> computers but must employ OAuth2 which (a) is not available with the
> elderly Thunderbird that I love;

Ok. Unfortunately change is inevitable especially with software.

> (b) might or might not require an IMAP
> account, which I don't want;

Not a requirement. Using POP3 here.

> and (c) might require sending text
> messages to my phone each time I want to check my email or start
> Thunderbird or SOMETHING, and which I don't want to have to do because
> each goddam text message costs me 1% of my annual cellphone cost.

The only thing that's required is 2FA. There's multiple options on how to
use it and none of it requires what you fear.

> don't want to be chained to my cellphone even if there were no cost.
> Yeah, I bother to pick up pennies in the street too.
>
> If I'm getting it wrong it's because there is NO authoritative
> prescription for dealing with this shit on my linux computer come May 30.

As a linux user you should know by now that you often have to solve your
own problems. Especially if you're doing things outside of the norm.
Railing against other people/orgs because of your choices you've made won't
change anything.

>> I moved mine and my FIL's thunderbird to it years ago to avoid the really
>> clunky app passwords.
>>
>> OAuth has been around a long time and proven itself as reliable and secure.
>
> I don't care. It's not available on my preferred version of Thunderbird.

Then you're screwed* unless you prepare *ahead* of May 30th.

*probably not, but you are making life increasingly difficult for yourself.

>>> The available instructions about what changes to our desktop
>>> browsers/email programs are both lacking and contradictory.
>>
>> Try here
>> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
>
> Easy-peasy, right? The nastiest problem is having to install a new
> version of TB. BTW, TB38 doesn't support OAuth2, although the above
> says that V31 and older do not.

Er. Isn't v38 *newer* than v31?

> I will NOT write over my current
> version of TB, but will run the new version completely separately after
> having copied over my profile to the new profile. Not sure if that will
> cause damage, but right now using newer TB facilities for importing
> current settings, passwords, addressbook etc. do NOT work reliably.
> Moreover, the newer addressbook displays are hopelessly ugly and
> wasteful of space.
>
> Still, maybe it will indeed be easy. We'll see.

Your choice. Your consequences. You've got backups, right?

I moved to the new Thunderbird a couple of years ago and from memory it
went smoothly.

>>> Some/many of us are not computer security experts. We expect the
>>> professionals to deal with this shit, not lay it on our shoulders. I'm
>>> most worried about having to establish new unwanted IMAP accounts (which
>>> I don't want to begin with) and notifying nearly 3 decades of entities
>>> of the new account names.
>>
>> That's unnecessary and won't happen.
>
> We'll see. It all depends on whether or not I will need to be
> constantly feeding in codes.

It won't. I don't think I've ever had to, but at worst it might ask the
first time.

>>> Google has NOT provided explanations for desktop computer users, only
>>> phone users. This seems... irresponsible. And it seems tacky to dump
>>> on someone with a question about something that MIGHT affect us and
>>> which, so far, has NOT been explained to non-tech people.
>
>

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6i0kb$vef$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62934&group=alt.comp.os.windows-10#62934

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ithink...@gmail.com (Chris)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox
& Thunderbird?
Date: Tue, 24 May 2022 07:14:20 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 13
Message-ID: <t6i0kb$vef$2@dont-email.me>
References: <t6bngu$177t$1@gioia.aioe.org>
<jeu4vcFn4l8U1@mid.individual.net>
<t6fc18$j8j$2@dont-email.me>
<t6fe00$1862$1@gioia.aioe.org>
<t6g5at$agj$1@dont-email.me>
<t6geh4$t9a$2@gioia.aioe.org>
<t6gigt$o0i$1@dont-email.me>
<jf22rpFelgjU8@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 24 May 2022 07:14:20 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="4c576c2088757c9d120ce7df8aea2756";
logging-data="32207"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18RytywoGUVhsylnCBRkRyTWcvKqa+UIX0="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:8u8+Wg2LNO1PjP+9MZfdlAny7mo=
sha1:l8pnwvR0U1q+vq1TnGBEaqClWc0=
 by: Chris - Tue, 24 May 2022 07:14 UTC

Andy Burns <usenet@andyburns.uk> wrote:
> Chris wrote:
>
>> We all have to make our own judgements. I prefer to use a password manager
>> that is under my control (i.e. not the browser one)
>
> That's what I do, most of the time I can logon with a fingerprint to unlock the
> password manager, it prompts for the master password *just* often enough to make
> sure I don't forget what it is ...

Yeah. Those prompts are invaluable. I would have forgotten my master
password a long time ago...

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6iaim$b37$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62937&group=alt.comp.os.windows-10#62937

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 11:43:51 +0200
Organization: Aioe.org NNTP Server
Lines: 65
Message-ID: <t6iaim$b37$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6gp1q$cet$1@dont-email.me>
Injection-Info: gioia.aioe.org; logging-data="11367"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-RFC2646: Format=Flowed; Response
X-Notice: Filtered by postfilter v. 0.9.2
X-Priority: 3
 by: R.Wieser - Tue, 24 May 2022 09:43 UTC

Bev,

> OTOH, we're all adults here

Except for the one who aren't you mean ? Ofcourse. :-)

Arlen here, with its "lets cross- and multipost this new tutorial
*everywhere*" is one of them. The kids in this thread throwing
accusations at me because they refuse to even /try/ to pull their own weight
are a few others.

And just take a look into, amongst others, alt.os.linux A number of people
there are fighting each other, with at least one of them hijacking other
peoples subjectlines or threads to throw more shit at each other.

They /might/ be adults by years, but certainly not by behaviour.

> -- presumably able to recognize bullshit when we see it. If not, it's OUR
> problem.

:-) You sound like you would condemn a woman for being raped or a man for
being mugged. I mean, she and he /should/ have seen it coming, right ?

> Frequent warnings get ignored.

If that is good or not depends on the warning and with which intention it is
given.

For example, the "I'm from microsoft and we detected a virus on your
computer" is an example of a warning with malicious intent.

> Even after I had children of my own my grandmother warned me not to touch
> the hot stove.

:-) Such are parents. You may have grown up, but you /always/ stay their
child.

Personally a few of those warning did draw me to them as if a moth to the
flame. I'm pretty sure I did stick my finger into a candle flame once, an
learned from the price I had to pay (a blister) not to do it again.

> I'm willing to give advice when I feel it's useful, but it's up to the
> receiver whether or not to follow it and I don't get upset if it's
> ignored.

You need to supply some context with that I'm afraid. If someone ignores
advice and only they themselves get hurt a bit I normally do not really
care. Play stupid, pay the price. But I would get quite upset if the person
who ignores the advice would stand a good chance to get killed, or even
"just" stands to lose a digit or even a limb.

I also would quite likely get upset when advice is ignored because of an
"meh, I don't care if someone gets hurt because of what I'm doing" attitude.

> I generally don't read the material in question just because of the
> quantity.

I can only hope that you at least tried to read one of his tutorials before
you decided to tell me that you decided on what could as well have been the
equivalent of a "lorum ipsum" document that the OP is helpfull.

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6iaio$b37$2@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62938&group=alt.comp.os.windows-10#62938

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!aioe.org!XakcSTEO51npqVb7OVl71w.user.46.165.242.75.POSTED!not-for-mail
From: addr...@not.available (R.Wieser)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 12:03:18 +0200
Organization: Aioe.org NNTP Server
Lines: 35
Message-ID: <t6iaio$b37$2@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <jeu4vcFn4l8U1@mid.individual.net> <t6fc18$j8j$2@dont-email.me> <t6fe00$1862$1@gioia.aioe.org> <t6g5at$agj$1@dont-email.me> <t6geh4$t9a$2@gioia.aioe.org> <t6gigt$o0i$1@dont-email.me> <t6gmrl$uc6$1@gioia.aioe.org> <t6huba$ht3$1@dont-email.me>
Injection-Info: gioia.aioe.org; logging-data="11367"; posting-host="XakcSTEO51npqVb7OVl71w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MSMail-Priority: Normal
X-RFC2646: Format=Flowed; Original
X-Priority: 3
X-Notice: Filtered by postfilter v. 0.9.2
 by: R.Wieser - Tue, 24 May 2022 10:03 UTC

Chris,

>>> I prefer to use a password manager that is under my control (i.e. not
>>> the
>>> browser one)
>>
>> Can you tell why that that is ? I mean, what does a browser (not) do
>> that
>> you dislike it.
>
> They weren't terribly secure last I looked - admittedly a long time ago -

Hmmm... I'm not at all sure what kind of security where looking at there.

> and aren't useful for places other than websites.

True.

> There's less control over your passwords.

Hmmm... Even my (rather old) FF allows me to edit the name and password
for a website, as well as in- and export them (just checked to be sure).

> Nope. There's more redundancy with a password manager IMO. Several things
> would have to go wrong for me to lose access everywhere.

If you are referring to backups (of the master passsword, the password list
as well as the program), those work for in-browser password managers too.

Thanks for they reply.

Regards,
Rudy Wieser

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<SIC3ruFlzKjiFwoi@invalid.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62939&group=alt.comp.os.windows-10#62939

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!rocksolid2!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ben...@nowhere.com (Algernon Goss-Custard)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 11:01:09 +0100
Organization: A noiseless patient Spider
Lines: 15
Message-ID: <SIC3ruFlzKjiFwoi@invalid.com>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com> <jf1v3uFelgjU4@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain;charset=us-ascii;format=flowed
Injection-Info: reader02.eternal-september.org; posting-host="f3b6f9878d11629ed7e80ed17b1ca1e1";
logging-data="4530"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19oHbHHhlyq/Y8uaEVufbHXAoW0GJbBH38="
User-Agent: Turnpike/6.06-U (<eEBfs8GSxGf0sovSkN9qpFzTvc>)
Cancel-Lock: sha1:lN32QFjY7TVzV4bqLXhBXFMuIpE=
 by: Algernon Goss-Custar - Tue, 24 May 2022 10:01 UTC

Andy Burns <usenet@andyburns.uk> posted
>Algernon Goss-Custard wrote:
>
>> That page exemplifies precisely what TRB means. It explicitly says
>>that oAuth is required as of May 30, 2022
>
>Unfortunately that's wrong ...
>

So you say, Andy, and I believe you know what you're on about. But
Mozilla says different, and Google says different again. That's what I'm
worried about.

--
Algernon

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<j4Q7HGGu4KjiFwNq@invalid.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62940&group=alt.comp.os.windows-10#62940

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ben...@nowhere.com (Algernon Goss-Custard)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 11:06:38 +0100
Organization: A noiseless patient Spider
Lines: 84
Message-ID: <j4Q7HGGu4KjiFwNq@invalid.com>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<Bp4jDgHID7iiFwxn@invalid.com> <t6gi6c$lgi$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain;charset=us-ascii
Injection-Info: reader02.eternal-september.org; posting-host="f3b6f9878d11629ed7e80ed17b1ca1e1";
logging-data="8819"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/0Oz1V/+jLOap7eecJoYpzz0lzGLmSdGg="
User-Agent: Turnpike/6.06-U (<eNKfsYiyxGP2KovSsd2qpFX$wX>)
Cancel-Lock: sha1:c506le2ZNgQQHIIFFwnSNLKoSIo=
 by: Algernon Goss-Custar - Tue, 24 May 2022 10:06 UTC

Chris <ithinkiam@gmail.com> posted
>Algernon Goss-Custard <Ben@nowhere.com> wrote:
>> Chris <ithinkiam@gmail.com> posted
>>> The Real Bev <bashley101@gmail.com> wrote:
>>>> On 05/22/2022 03:42 AM, R.Wieser wrote:
>>>>> Andy,
>>>>>
>>>>> "Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?"
>>>>>
>>>>> There is a problem with a road in my city. Do you think that it
>>>>>will affect
>>>>> us that are driving a Ford or Chrysler ?
>>>>>
>>>>>
>>>>> The article you provided doesn't name /any/ kind of browser.
>>>>>Ask yourself
>>>>>> Why not ?
>>>>
>>>> That's needlessly snotty.
>>>>
>>>> Some/many of us regard the security of our email as largely irrelevant
>>>> because we assume that anything we put on the internet is public
>>>> information anyway. If username+password is the equivalent of a
>>>> motorcycle air cleaner that filters out birds we're OK with that.
>>>>
>>>> We are now, however, forced to pay attention to google's upcoming
>>>> requirement of OAuth2 rather than the username+password that we have
>>>> been satisfied with for decades.
>>>
>>> I'm not sure I understand why you think it's so different? It's still a
>>> username and password just via a different mechanism that is largely hidden
>>> from the user.
>>
>> The reason *I* think it's different is because it might not work on 31st
>> May, whereas the POP3 method I use now *does* work.
>
>POP3 with OAUTH works today. Why would it stop next week?

Because Gmail is changing its login protocols in a way that I don't
understand.

>> The consequences if it doesn't will be very unpleasant. There are zero
>> benefits to me of oAuth or app passwords. The set-up I have is perfectly
>> adequate and secure.
>
>The benefit is that your email client will continue to work. Why is that
>not enough of an incentive?

That's not a benefit. That's something doing the same as what I've got
now. If it works after 30 May.

>>> I moved mine and my FIL's thunderbird to it years ago to avoid the really
>>> clunky app passwords.
>>>
>>> OAuth has been around a long time and proven itself as reliable and secure.
>>>
>>>
>>>> The available instructions about what changes to our desktop
>>>> browsers/email programs are both lacking and contradictory.
>>>
>>> Try here
>>> https://support.mozilla.org/en-US/kb/thunderbird-and-gmail
>>
>> That page exemplifies precisely what TRB means. It explicitly says that
>> oAuth is required as of May 30, 2022, whereas other pages (including
>> some from Google) do not say that, they say or imply that app passwords
>> will continue to work with POP3.
>
>I don't see how. Google explicitly says app passwords are disappearing. It
>doesn't matter whether it's POP or IMAP.
>
>> Andy Burns has also said on
>> alt.comp.software.thunderbird that POP3 isn't being disabled. I do not
>> know who to believe.
>
>You're confusing authentication with email protocol. Only one of them is
>changing.

I freely admit to being confused, but I'm just quoting what other people
say. Not my fault if it's confusing.

--
Algernon

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<QZinvyGkGLjiFwYv@invalid.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62941&group=alt.comp.os.windows-10#62941

 copy link   Newsgroups: alt.comp.os.windows-10 alt.comp.software.thunderbird alt.comp.software.firefox
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Ben...@nowhere.com (Algernon Goss-Custard)
Newsgroups: alt.comp.os.windows-10,alt.comp.software.thunderbird,alt.comp.software.firefox
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 11:21:24 +0100
Organization: A noiseless patient Spider
Lines: 59
Message-ID: <QZinvyGkGLjiFwYv@invalid.com>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org>
<t6dlgh$3mb$1@dont-email.me> <t6fc17$j8j$1@dont-email.me>
<t6go6c$5rj$1@dont-email.me> <jf27hoFgvk7U4@mid.individual.net>
<t6grkl$qj$1@dont-email.me> <jf2apfFgvk8U1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain;charset=us-ascii;format=flowed
Injection-Info: reader02.eternal-september.org; posting-host="f3b6f9878d11629ed7e80ed17b1ca1e1";
logging-data="12651"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+SiY5A1ZE1WttljvYLzZ87syHHwf4Nzbc="
User-Agent: Turnpike/6.06-U (<eHAfswCSxGP0govSEd8qpF$XJP>)
Cancel-Lock: sha1:FX0q5ort0i5Y7Au6OBGGP/Y8EWE=
 by: Algernon Goss-Custar - Tue, 24 May 2022 10:21 UTC

Andy Burns <usenet@andyburns.uk> posted
>The Real Bev wrote:
>
>> Just being unable to use TB38 is entirely sufficient for me to wish a
>>painful death upon the appropriate google personnel.
>
>How many gmail users are there? 1.8 billion apparently
>
>3/4 of them use gmail via the phone app
>
>I'd guess 2/3 of what's left use the web interface
>
>So maybe 10% using IMAP or POP
>
>How many of those using thunderbird
>
>How many of those under Linux?
>
>How many of those sticking with an old TB version?
>
>And you wonder why they haven't written a guide that's directly
>applicable to you?

Why not? It's effectively what you have done on this and similar threads
(free of charge too - thanks)! And anyway this change in Gmail is aimed
*only* at people who use "old less secure mail clients". The other 95
per cent are totally unaffected. The guide *only* needs to be addressed
to us recalcitrants. It doesn't need to be specific to any particular
e-mail client or operating system.

How many thousands of man-hours has Google spent on this change? Surely
they could have devoted one man-day to writing a simple instruction
sheet for us, essentially:

[begin]
Do you have a fully updated e-mail client?
[yes] You're OK. Don't change anything. [exit]
[else]
Does your e-mail client support oAuth2 with either IMAP or POP?
[yes] Log into your gmail account and set it up to use IMAP or POP with
oAUth2 and follow the instructions. This will work after the login
routine changes on 30 May [exit]
[else] Log in to your gmail account and set up 2FA. Follow the
instructions for setting an app password for your mail account. When you
have it, enter it as the new login password for your mail account. This
will work after the login routine changes on 30 May.
[exit]

It might need to be a bit more detailed than that but surely not much
more.

>If you creep onto such a specific limb, surely you have have to develop
>your own "knack" of knowing what applies, what doesn't and what you
>have to test for yourself because you're essentially unique?

There are probably several million of us.

--
Algernon

Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?

<t6iooq$1c0d$1@gioia.aioe.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=62943&group=alt.comp.os.windows-10#62943

 copy link   Newsgroups: alt.comp.software.thunderbird alt.comp.software.firefox alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!JYN7Dr6ru5dntNugMUP91w.user.46.165.242.75.POSTED!not-for-mail
From: RudolphR...@nospam.net (Rudolph Rhein)
Newsgroups: alt.comp.software.thunderbird,alt.comp.software.firefox,alt.comp.os.windows-10
Subject: Re: Does this bug in Google GMail OAuth affect us on Firefox & Thunderbird?
Date: Tue, 24 May 2022 17:06:41 +0300
Organization: Aioe.org NNTP Server
Message-ID: <t6iooq$1c0d$1@gioia.aioe.org>
References: <t6bngu$177t$1@gioia.aioe.org> <t6d43k$oc0$1@gioia.aioe.org> <t6dlgh$3mb$1@dont-email.me> <t6ds41$10aq$1@gioia.aioe.org> <t6dtie$ud3$1@dont-email.me> <t6e9b5$hf5$1@gioia.aioe.org> <t6ecpa$crv$1@dont-email.me> <t6fdee$10f2$2@gioia.aioe.org> <t6gp1q$cet$1@dont-email.me> <t6iaim$b37$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 8bit
Injection-Info: gioia.aioe.org; logging-data="45069"; posting-host="JYN7Dr6ru5dntNugMUP91w.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: 40tude_Dialog/2.0.15.41 (Beta 38)
X-Notice: Filtered by postfilter v. 0.9.2
 by: Rudolph Rhein - Tue, 24 May 2022 14:06 UTC

"R.Wieser" <address@not.available> wrote:

> They /might/ be adults by years, but certainly not by behaviour.

Your own behavior has been nothing other than that of a retard.

Pages:12345678910
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor