On Wed, 2025-11-12 at 13:57 -0300, soles.g wrote:
> I'm having the same problem... although I can still read it on my
> phone without any issues...
> 
> I can't install it on Thunder... :-?

If you're re-typing a password displayed on one device into another, be
very sure there are no typing errors.  That you can tell apart a letter
O from a number 0, that you can tell apart il1| characters, and you
haven't accidentally added any blank spaces before or after it.

Not long ago I've had to deal with these issues with an old lady
getting her email working again with Telstra.

Every different app that accessed the mailbox had to have its own
password, because the mail server insisted on it.  It could tell which
thing was trying to connect, and required them all to have their own
passwords (not that *they* explained that, nor did their own support
staff know that, either).

There's also every chance that an update to Thunderbird (or any other
mail program) may trigger another new password requirement.  It all
depends on the methods they use to fingerprint each app, there's a
variety of undisclosed ways they can do that (app name, app version, OS
information, various other headers).  In the end, you could end up
needing six different passwords to access the same mailbox on different
devices or programs, that just screams bad security risk to me.

You can bet hackers aren't as restricted as general users are.  And
they can trigger you having to go through password resets again if
enough failed attempts are made at getting into your mailbox.

Their mailserver web interface had to be used to generate the app
password, and you had to go exploring deep into its hidden
configuration options to find the bit that generated it.  Every aspect
about that was hidden, the menu was hiding, the feature buried deep.

You couldn't set your own password, you had to use an auto-generated
one, which used a plethora of characters that are hard to tell apart,
and it displayed them in a font that made it even harder.  And because
you were virtually forced into doing it on separate devices (*), you
had to type it in by hand instead of being able to copy and paste.

Because between their website coding, and how mobile phones worked,
copy-and-paste was damn near impossible, and on their phone you had a
through-the-keyhole view of their website.

And, yes, I understand the thought process that by generating the
password for the user you stop them creating stupid ones, and from re-
using the same password in various places, but there are better ways of
doing that.  And not stupid you must use one capital, one number, and
one symbol rules that were a bad idea when first thought of decades ago
(many idiots will have "Password123!").  "redcatcloudytrainlegsgrass"
is random, unguessable, just as brute-force uncrackable as
hj8iotrewhdkjhk, but a damn sight easier to read and type.



-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
(yes, this is the output from uname for this PC when I posted)
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to