News for hackers. Stuff that matters.

A comment on Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30. Parent comment

Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by Ajedi32 on Friday January 19, 2024 @11:39AM (#39057426)
> imagine that OP is reusing passwords

FWIW that's impossible in this context since:

> you cannot set app passwords yourself

Though more generally, password reuse is indeed a problem regardless of entropy.

[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by jefftk on Friday January 19, 2024 @03:14PM (#39060482)
Not impossible: you could get the application specific password and then start using it on other sites.

That would be foolish, but users do all sorts of foolish things.

[ Parent | on HN ]