Closed Bug 1889410 Opened 2 years ago Closed 1 year ago

Yandex App password, forcing me to click a button to download emails

Categories

(Thunderbird :: Security, defect)

Thunderbird 115
Unspecified
Windows 8
defect

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: wolfgang7833, Unassigned)

Details

(Whiteboard: [support])

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36

Steps to reproduce:

Yandex company no longer works in tb & they forced me to use an "app password",
so because i don't want to save passwords in my hard drive, i add it each time
thunderbird opens. My notification system is set to check emails every 1 minute.

Actual results:

A sound "notify" keeps playing whenever email (s) is available on the yandex
server. (bug) but the email (s) aren't downloaded at all, which creates that non stop loop of sound notification. & this only happens for the app password method.. at least, on yandex for now .. .

To download the email (s), when i hear that buggy loop, i'm compelled
"even to wake up during the night", to click on "Get Messages" button .. .

Expected results:

I shouldn't have needed to click on "Get Messages" to download email (s)
using an App password with Yandex.com, because during auto verifications,
i'm only warned non stop & nothing downloads until i click on it .. .

Tb v115.9.0 x64, on win8 x64.

OS: Unspecified → Windows 8
Whiteboard: [support]
Component: Untriaged → Security

Hi Wayne, is it evolving ?

I have no experience here.
Have you asked in https://support.mozilla.org/en-US/questions/thunderbird ?

Alex, have you encountered any issues like this?

Flags: needinfo?(heffplay.reg)

(In reply to Paul from comment #0)
(In reply to Wayne Mery (:wsmwk) from comment #5)

Alex, have you encountered any issues like this?

Yandex App password is a security features designed to protect users from unauthorized access to their accounts. It allows users to create a unique password that can only be used once per login attempt for each application. The author of this topic states that they do not want to store passwords on their hard drive. However, this is not how the Yandex App password system works. Each time a user attempts to log in, the system checks the validity of the App password. If the password has been used previously, it will be considered invalid. Therefore, it is necessary for users It is necessary to save the password in TB. You need to do this in the password manager for both Incoming mail and SMTP.

Flags: needinfo?(heffplay.reg)

(In reply to Paul from comment #7)

the tweak is amazing & avoids u sweat...... .

& naturally, a saved password cannot be retrieved.

app password or not, its still a bug, cuz noone should be forced to save passwords. go play alex, if u dont wanna contribute.

This can't be a bug, because that's how the Yandex App password platform works and Thunderbird has absolutely nothing to do with it and can't do anything.
Password that can only be used once per login attempt for each application.
Attackers will not be able to use your saved password to use it to log in, because it will be linked to only your application forever if you save the password.

more poetry..

applications can be transfered & copied, learn.

Status: UNCONFIRMED → RESOLVED
Closed: 1 year ago
Resolution: --- → INVALID

This whole thread can be deleted.

the issue's resolved..

https://support.mozilla.org/en-US/questions/1462675#answer-1673538

it was the stupid 'Automatically download new messages' unchecked,
i don't know how that happened cause each time i add an account,
i don't remember having to select that "option".

You need to log in before you can comment on or make changes to this bug.