Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Less secure apps and your Google Account

support.google.com

Post reply on HN
Print view View original

71–80 of 272 posts

Re: Less secure apps and your Google Account

#71

Post by superkuh »

md_ wrote: post #61
cxr wrote: post #47

It's interesting how words can be strung together to avert scrutiny of relevant facts pertaining to the message being communicated—and sometimes even used to mask dishonesty.* The terse form of the advisory states: > To help keep your account secure, starting May 30, 2022, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and…

> Google, not the Thunderbird team, are to blame for why your Gmail password is the same as your Google Vault password… Hmm, but couldn’t third party developers just use OAuth instead? Thunderbird works with Google’s standard XOATH Oauth IMAP implementation, last I checked.

If an email provider does not offer standard pop3 or imap it is not an email provider. It's just some web shit.

Re: Less secure apps and your Google Account

#72

Post by habosa »

md_ wrote: post #61
cxr wrote: post #47

It's interesting how words can be strung together to avert scrutiny of relevant facts pertaining to the message being communicated—and sometimes even used to mask dishonesty.* The terse form of the advisory states: > To help keep your account secure, starting May 30, 2022, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and…

> Google, not the Thunderbird team, are to blame for why your Gmail password is the same as your Google Vault password… Hmm, but couldn’t third party developers just use OAuth instead? Thunderbird works with Google’s standard XOATH Oauth IMAP implementation, last I checked.

In some cases yeah but not for mail. The GMail API is great but to use it you have to spend like $75k on a security review that Google has to approve.

Re: Less secure apps and your Google Account

#73

Post by lmilcin »

rascul wrote: post #34

Google keeps making it more and more difficult for me to use their services. It's going to be painful when Google finally forces me off Gmail.

It is your choice whether you use these services or not.

On the other hand, if I decided to use them, I would like rules to make my account safer.

It is not going to make it more difficult to get into your account -- companies that implemented insecure login method will basically have to adjust and that's it.

Re: Less secure apps and your Google Account

#74

Post by idop »

alar44 wrote: post #37
tomxor wrote: post #16

I've noticed gmail randomly blocks Firefox these days under the pretence of "your browser may not be secure" (i.e it doesn't persist through page refreshes), similar to how they try to make you do a captcha unless you refresh the page... I seem to have less and less control over where and how I am allowed to sign in (even thought I'm using a U2F key), and as a result I'm definitely getting pushed closer to the thresh…

Your device is probably pwned. But go ahead and blame Google. I love how people just ignore these warnings.

It's probably uBlock or some extension that blocks Google's tracking.

Re: Less secure apps and your Google Account

#75

Post by lolinder »

andrelaszlo wrote: post #59
lolinder wrote: post #48

Earlier quoted context omitted.

Suggestion? Start now. I moved my primary email to a custom domain a bit over a year ago, and it takes a while to slowly migrate everything over. You don't want to be doing that while under pressure from whatever it is that forces you off.

I'm looking to do that now, since Google will starts charging for (old grandfathered) custom domains. What service are you using for emails?

I'm using Fastmail, and I've loved it so far. The biggest thing that landed me there was the built-in snooze feature, which works just like Gmail's. Everything else has worked perfectly, too.

Re: Less secure apps and your Google Account

#77

Post by corobo »

md_ wrote: post #61
cxr wrote: post #47

It's interesting how words can be strung together to avert scrutiny of relevant facts pertaining to the message being communicated—and sometimes even used to mask dishonesty.* The terse form of the advisory states: > To help keep your account secure, starting May 30, 2022, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and…

> Google, not the Thunderbird team, are to blame for why your Gmail password is the same as your Google Vault password… Hmm, but couldn’t third party developers just use OAuth instead? Thunderbird works with Google’s standard XOATH Oauth IMAP implementation, last I checked.

e: fyi the ringfence bit in this post is incorrect. Leaving for posterity but don't believe this comment, see replies :)

--

Could just set up an app password limited to accessing gmail, been able to do that for like 10 years now and it's not going away with this change

different password: check

ringfenced access: check

Re: Less secure apps and your Google Account

#79

Post by 0xCMP »

superkuh wrote: post #71
md_ wrote: post #61

Earlier quoted context omitted.

> Google, not the Thunderbird team, are to blame for why your Gmail password is the same as your Google Vault password… Hmm, but couldn’t third party developers just use OAuth instead? Thunderbird works with Google’s standard XOATH Oauth IMAP implementation, last I checked.

If an email provider does not offer standard pop3 or imap it is not an email provider. It's just some web shit.

they offer both. they simply require more secure authentication. something which doesn't require the app to know the username or password. it's that simple.

Re: Less secure apps and your Google Account

#80

Post by aaronax »

ianai wrote: post #66
lolinder wrote: post #48

Earlier quoted context omitted.

Suggestion? Start now. I moved my primary email to a custom domain a bit over a year ago, and it takes a while to slowly migrate everything over. You don't want to be doing that while under pressure from whatever it is that forces you off.

Does that handle the huge torrent of ads well? Seemingly every website and brick and mortar I've shopped at ever sends me at least one email per day.

You can use the unsubscribe link at the bottom of each email. I have done this probably hundreds of times over the past 5 years and it has worked as expected with no undesirable side effects.
Post reply on HN