Live data from Hacker News

Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

github.com

21–30 of 32 posts

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#21
Nice but... Backup is nothing without restore and actually "restore" for third party services on a closed proprietary infra it's not possible...

My way for mails is simply having local maildirs using mails via notmuch and serving the maildir if needed via local dovecot/with an eventual MailPile/Rainloop etc webmails, for contacts Davis (like Radicale or Baikal) with DavX⁵ on Android etc, IOW the sole way I fond is being able to use someone else service if I need it (for instance not to end up in spam on all web giants mails) but still owning my infra. Just having data I can't really use it's not enough unfortunately...

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#22

Looks handy, although it only grabbed like the first 2 years of gmail for me, out of 20. Re-running the docker image did not help.

I had a similar problem. I've submitted an issue.

https://github.com/WeeJeWel/node-google-backup/issues/1

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#23
post #7

Earlier quoted context omitted.

Good luck recovering when you're nowhere logged in

We don't know if they're logged in or not, they did not specify

You replied to my comment about logging in just fine.

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#24

got-your-back uses Gmail's API instead of IMAP with an insecure app password, which is a discouraged way of accessing Gmail and will eventually be phased out in favor of OAuth access tokens over IMAP (in fact, I thought it already had been). As for other services beyond Gmail, there's not a great ecosystem for exporting. For one-off exports, Google Takeout is decent enough, although there's a lacking ecosystem to imp…

I didn’t know about that. However, I explicitly wanted to avoid having users to create an OAuth project because it’s a hassle. Also these tokens can expire if they’re not refreshed after a while.

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#25
post #10
post #6

Earlier quoted context omitted.

So when your cookie expires you're done for?

I can log in using phone as 2fa just fine. But takeout only accepts Authenticator.

Is it not possible to use the phone 2fa to reset the authenticator 2fa?

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#26

got-your-back uses Gmail's API instead of IMAP with an insecure app password, which is a discouraged way of accessing Gmail and will eventually be phased out in favor of OAuth access tokens over IMAP (in fact, I thought it already had been). As for other services beyond Gmail, there's not a great ecosystem for exporting. For one-off exports, Google Takeout is decent enough, although there's a lacking ecosystem to imp…

Can Thunderbird not import the big .mbox files?

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#28
post #25
post #10

Earlier quoted context omitted.

I can log in using phone as 2fa just fine. But takeout only accepts Authenticator.

Is it not possible to use the phone 2fa to reset the authenticator 2fa?

Nope. I can find no official way to export my own data.

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#29

got-your-back uses Gmail's API instead of IMAP with an insecure app password, which is a discouraged way of accessing Gmail and will eventually be phased out in favor of OAuth access tokens over IMAP (in fact, I thought it already had been). As for other services beyond Gmail, there's not a great ecosystem for exporting. For one-off exports, Google Takeout is decent enough, although there's a lacking ecosystem to imp…

> insecure app password [...] and will eventually be phased out in favor of OAuth access tokens over IMAP What's so "insecure" about "per-app passwords"? I ask, because I've lost the past 5 years of my life to building and running an internet-facing OAuth2+OIDC IAM system and I'm (still) an active contributor back to the open-source OIDC framework it's built-on. I grok the grants and flows and I've got the blood-pres…

> a simpler system (like per-app passwords) can make a system overall more secure because there will be less mistakes being made

But a mistake WILL be made, because humans are fallible, and mistakes with a long lived bearer token can be extremely damaging, and can remain latent for a long period of time (e.g., password accidentally saved on disk and "deleted").

With proper OAuth, a lot of mistakes can be practically harmless (e.g., access token accidentally saved somewhere).

Re: Command-Line Utility to Backup Google Mail, Calendar and Contacts to Files

#30
post #7

Earlier quoted context omitted.

You could attempt to get that 2fa removed by trying to sign in from a new device and following the steps to recover your account.

Good luck recovering when you're nowhere logged in

Back in 2018 I was able to recover a long-lost account by answering questions about when i created it and confirming an old phone number attached to it.
Post reply on HN