Earlier quoted context omitted.
I've been using Firefox for years, never faced this issue before... have you tried updating your browser?
> have you tried being a botnet enabler? Heh.
How is updating Firefox enabling botnets?
Less secure apps and your Google Account
121–130 of 272 posts
Re: Less secure apps and your Google Account
#122Google keeps making it more and more difficult for me to use their services. It's going to be painful when Google finally forces me off Gmail.
Suggestion? Start now. I moved my primary email to a custom domain a bit over a year ago, and it takes a while to slowly migrate everything over. You don't want to be doing that while under pressure from whatever it is that forces you off.
Would like to do the same myself.. sadly my domain regsitrar is Google, not too sure if I'll need to register another name (a .dev tld) or if there's an easy route of changing registrars.
Re: Less secure apps and your Google Account
#123I've noticed gmail randomly blocks Firefox these days under the pretence of "your browser may not be secure" (i.e it doesn't persist through page refreshes), similar to how they try to make you do a captcha unless you refresh the page... I seem to have less and less control over where and how I am allowed to sign in (even thought I'm using a U2F key), and as a result I'm definitely getting pushed closer to the thresh…
I've been using Firefox for years, never faced this issue before... have you tried updating your browser?
Seconding this. I'm running Firefox on mac, with the built-in "Enhanced Tracking Protection" enabled, and uBlock Origin with the default settings. I've never seen that error. I don't use a VPN and I'm in the United States.
Re: Less secure apps and your Google Account
#124I've noticed gmail randomly blocks Firefox these days under the pretence of "your browser may not be secure" (i.e it doesn't persist through page refreshes), similar to how they try to make you do a captcha unless you refresh the page... I seem to have less and less control over where and how I am allowed to sign in (even thought I'm using a U2F key), and as a result I'm definitely getting pushed closer to the thresh…
FWIW, I happened to try and login to my Google account a few months ago and was promptly kicked out in exactly the same way, and after root-causing "what did I do..." I realized it was because I'd just set --remote-debugging-port=.... when restarting my Chrome session.
Turns out this sets navigator.webdriver (as in, makes that key exist), which Google's login chucks a wobbly at. It will not let you in with that set, sadly because dumb scammers seem to absolutely love (???) using headless Chromium to attempt to fulfill their dastardly plans. (Which is really sad, because it makes legitimate tinkering that much harder (eg, can't interact with my primary session using nodejs/whatever :I'm wondering if Firefox is setting something off something similar. You say this only happens randomly? I wonder what correlated thing is happening at the same time as these failures, and if the "oh it's that" is on your or Google's side of the internet connection...
Re: Less secure apps and your Google Account
#125Is this the end for git-send-email through Google infra?
No: the announcement says you can use application specific passwords https://support.google.com/accounts/answer/185833
Re: Less secure apps and your Google Account
#126why is google's font so damn tiny? It's like they don't want you to read this stuff.
It's .875rem, which works out to 14px with standard settings. That isn't huge but it's far from "damn tiny" in my opinion. You might have your browser set to a smaller default font size?
Re: Less secure apps and your Google Account
#127This kills gnus/mu through Emacs, right?
No: the announcement says you can use application specific passwords https://support.google.com/accounts/answer/185833
Re: Less secure apps and your Google Account
#128Earlier quoted context omitted.
No, you can still use IMAP with Thunderbird for example but you login to google account and Thunderbird get a token similar to how all OAuth works, what is blocked is using email/passowrd directly with your IMAP client.
What about clients which don't support that, like Google's "send mail as" feature? I suppose that won't be supported anymore?
Indeed: this is a hard compatibility break, without a simple workaround.
The thing is, this is nowhere near new: it's been announced years ago, and slowly rolled out since 2019. Actually, IIRC, the rollout has been postponed at least once in 2020, due to covid (in order to not cut people off). I recall implementing Xoauth for IMAP, specifically for this.
Re: Less secure apps and your Google Account
#129Earlier quoted context omitted.
No, you can still use IMAP with Thunderbird for example but you login to google account and Thunderbird get a token similar to how all OAuth works, what is blocked is using email/passowrd directly with your IMAP client.
In other words, Gmail is no longer compliant with Internet email standards like POP3/IMAP.
Actually, IMAP supports various authentication protocols - "plaintext login MUST be supported" was never a part of the spec.
Re: Less secure apps and your Google Account
#130why is google's font so damn tiny? It's like they don't want you to read this stuff.
Do you have the page zoomed out or something? The font-size on that page is 16px tall on desktop. Hacker News titles are 16px and comments are 14px. (Note: I measured in px manually due to the use of rems in the CSS; easier to compare this way)