Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)

To: Elmar Stellnberger <estellnb@gmail.com>
Cc: debian-security@lists.debian.org
Subject: Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
From: Evgeny Kapun <abacabadabacaba@gmail.com>
Date: Mon, 11 Apr 2016 09:55:06 +0300
Message-id: <[🔎] 570B4A4A.3070000@gmail.com>
In-reply-to: <[🔎] 570A7DB1.5000408@gmail.com>
References: <[🔎] 570A7DB1.5000408@gmail.com>

On 10.04.2016 19:22, Elmar Stellnberger wrote:

my gmail password was malversated within a few seconds; i.e. I got a login attempt from HongKong and had to change the password after disconnecting.


Is it possible that it was YOUR login attempt? Maybe Google detected your login attempt through VPN as coming from Hong Kong and thus blocked it. If this is the case, your account was probably not compromised.

Actually, Google is very suspicious of login attempts from email clients and other non-browser programs. When logging in through a browser, it uses browser fingerprint and a persistent cookie to check that you are logging in from the browser that you usually use, but it can't do that with email clients.

Reply to:

Follow-Ups:
- Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
  - From: Elmar Stellnberger <estellnb@gmail.com>

References:
- SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
  - From: Elmar Stellnberger <estellnb@gmail.com>

Prev by Date: Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
Next by Date: Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
Previous by thread: Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
Next by thread: Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)
Index(es):
- Date
- Thread