News for hackers. Stuff that matters.

A comment on Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30. Parent comment

Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by freedomben on Friday January 19, 2024 @09:01AM (#39055503)
This password should not be in any leaked database of hashed passwords, because it is completely randomly generated. You can't even set it.*

*unless you take this password after it's generated and start reusing it in other services, but that is pure self sabotage

[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by jjnoakes on Friday January 19, 2024 @09:17AM (#39055688)
It would be if Google's app password hash database was leaked.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by throwaway2037 on Friday January 19, 2024 @09:46AM (#39056071)
Is there any public knowledge of a Google password hash database leak for any of their apps ... ever?
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by freedomben on Friday January 19, 2024 @09:41AM (#39056003)
Good point, although if that happens, then I think we probably have a much bigger problem
[ Parent | on HN ]