Using Gmail accounts in Outlook [OT in uk.d-i-y]

I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

On 05/04/2015 16:01, Stormin' Norman wrote:
On Sun, 05 Apr 2015 15:48:29 +0100, Roger
wrote:

I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!

Using TBIRD here to access Gmail accounts without even the slightest
problem. If you post the exact error message, maybe someone can help.

Thanks. This is the text of the rejection email which I received. The
links within it provide further details of the "problem".

quote
We recently blocked a sign-in attempt to your Google Account
].
Sign-in attempt details
Date & Time: Sunday 5 April, 2:07 pm GMT
Location: Unknown
If this wasn't you
Please review your Account Activity page at
https://security.google.com/settings/security/activity to see if
anything looks suspicious. Whoever tried to sign in to your account
knows your password; we recommend that you change it right away.
If this was you
You can switch to an app made by Google such as Gmail to access your
account (recommended) or change your settings at
https://www.google.com/settings/security/lesssecureapps so that your
account is no longer protected by modern security standards.

To learn more, see https://support.google.com/accounts/answer/6010255.

Yours sincerely,
The Google Accounts team
/quote

--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

Cannot say I've noticed anything as yet. Its probably more hand holding of
people who never bother to check things they are clicking on etc. I noticed
the other day that 1 in three emails I sent from Virgin to yahoo accounts
was undelivered quoting the virgin server as being in a spamhouse list.


The problem isits fine if these boys running mega email systems want to get
real picky about what they allow, but its not actually teaching the masses
to be careful is it?
The most insecure of email systems has to be online web mail of which Yahoo
and Google run a fair few, and only yesterday yet another friend has had
their entire address book copied and stupid messages sent to them all
pretending to be from the person with the original account. Until people
actually take charge of their accounts and make sure they are not hacked,
there is little hope other than to make email so awkward and unreliable as
to make it pointless.

Brian

--
Brian Gaff....Note, this account does not accept Bcc: email.
graphics are great, but the blind can't hear them
Email:
__________________________________________________ __________________________________________________ __________


"Roger Mills" wrote in message
...
I use Outlook as my main email client, and have lots of email accounts set
up within it - mainly those linked to my (PlusNet) internet account, but
also including one Gmail account. I have always - until now - been able to
send emails from my Gmail account. But I've just tried to send one today,
only to have it blocked by some nefarious guff about clients like
Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

On Sun, 05 Apr 2015 15:48:29 +0100, Roger Mills
wrote:

I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!


Of course!

I went into account settings and turned on "access for less secure
apps" (TM)

If there are consequences I am not yet aware of them.


--

Graham.

%Profound_observation%

On 05/04/2015 16:31, Stormin' Norman wrote:



Have you attempted to log into the account via the web interface
recently? I would do so and see what happens.


Well, I *hadn't* - but I have now, and it worked ok with no problem. It
did tell me that I'm using an out-of-date version of Firefox, but I was
still able to send an email to one of my other accounts ok. I use the
same Gmail account on my Android tablet and Android phone - and they're
both ok.

*And*, interestingly, I just successfully send an email from a different
gmail account, using Thunderbird - so it just seems to be Outlook that
it's objecting to!
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

On 05 Apr 2015, Roger Mills wrote in
alt.windows7.general:

They do seem to be offering the option to "allow less secure apps"
- but that comes with dire warnings!

Anyone one else encountered this - and what did you do?

The "dire warning" is just FUD intended to keep you within the confines
of Google. Go ahead and approve the "less secure" app. I did long ago
so I could use various other IMAP and POP mail clients and it has never
been a problem.

On 05/04/2015 18:28, Stormin' Norman wrote:
On Sun, 05 Apr 2015 18:25:23 +0100, Roger
wrote:

On 05/04/2015 16:31, Stormin' Norman wrote:



Have you attempted to log into the account via the web interface
recently? I would do so and see what happens.


Well, I *hadn't* - but I have now, and it worked ok with no problem. It
did tell me that I'm using an out-of-date version of Firefox, but I was
still able to send an email to one of my other accounts ok. I use the
same Gmail account on my Android tablet and Android phone - and they're
both ok.

*And*, interestingly, I just successfully send an email from a different
gmail account, using Thunderbird - so it just seems to be Outlook that
it's objecting to!

Are you using an antivirus product which scans your outgoing email
from outlook? If so, try disabling that and see if it helps.

I'm not sue whether it does or not. But I can send from other
(non-Gmail) accounts in Outlook so surely they'd be affected too if the
problem were related to my AV software? And the rejection message is
pretty certainly coming from an external Google server - not from
anything internal.
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

On 05/04/2015 19:09, Huge wrote:
On 2015-04-05, Roger wrote:
I use Outlook as my main email client,

There's your problem, right there.


So what would *your* solution be - bearing in mind that Google claim
that virtually every email client that isn't one of their making is
insecure!
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

On 05/04/2015 15:48, Roger Mills wrote:
I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!

What happens if you use SSL on port 465?

I have had to use this in some hotels where sending via the normal port
is blocked.

--
Michael Chare

Roger Mills wrote:
I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!

It might be a statement about SSL/TLS transport
when connecting to Google. Consider whether the path
to Google is protected by encryption.

Years ago, all your email was traveling as plaintext,
and could be read as it flies by, at the ISP. Or
read by the NSA. Tightening up the transport might
be part of this story.

I'm not enough of a mail/tools expert, to know from
your description, what protections were in existence
at the time you sent the mail. Knowing the port
numbers used would help.

I think part of the setup of things like that,
relies on certificates. And at least one recent
issue came up, when a certain laptop manufacturer,
installed MITM software which generated bogus
local certificates. Maybe this is some fallout
from that incident. Lenovo has since issued
removal software, due to the bad PR.

http://support.lenovo.com/ca/en/prod...rity/superfish

You have to read an awful lot of incident reports,
to have any inkling where some of these "security"
warnings are coming from. One of my browsers is
almost useless now, due to the tightening of
SSL/TLS and generating new sessions to prevent
certain kinds of padding attacks. There's all sorts
of stuff going on, that can be traced to
the exploits you read about.

*******

AS for the topic of email, to me webmail services
are for the birds. I use a POP3 account, I have
some idea what transport and what port number it
uses. I have some idea what my exposures are.
The people I've tried to help with webmail,
everything done in webmail seems to be served
with a large dose of bull****. Just a gut reaction
of mine. I'm as suspicious as you are.

Paul

On 05 Apr 2015, Paul wrote in
alt.windows7.general:

It might be a statement about SSL/TLS transport
when connecting to Google. Consider whether the path
to Google is protected by encryption.

I think Google mail requires SSL/TLS. They won't let you do POP3 or
IMAP without it.

AS for the topic of email, to me webmail services
are for the birds. I use a POP3 account, I have
some idea what transport and what port number it
uses. I have some idea what my exposures are.
The people I've tried to help with webmail,
everything done in webmail seems to be served
with a large dose of bull****. Just a gut reaction
of mine. I'm as suspicious as you are.

The error message in question is a real one from Google. I got it
myself when I first used my own email client to grab Google via POP3
and IMAP. At first I couldn't connect. When I went to the Gmail web
interface I found that message about "insecure apps". I had to approve
it before I could connect. They want to keep you using the web
interface or their approved Google mobile apps. Fortunately, they allow
you to use other things, you just have to jump through a couple of
hoops.

Roger Mills scribbled


On 05/04/2015 19:09, Huge wrote:
On 2015-04-05, Roger wrote:
I use Outlook as my main email client,

There's your problem, right there.


So what would *your* solution be - bearing in mind that Google claim
that virtually every email client that isn't one of their making is
insecure!


Thunderbird works and has SSL.

Jonno wrote:
Roger Mills scribbled


On 05/04/2015 19:09, Huge wrote:
On 2015-04-05, Roger wrote:
I use Outlook as my main email client,

There's your problem, right there.


So what would *your* solution be - bearing in mind that Google claim
that virtually every email client that isn't one of their making is
insecure!


Thunderbird works and has SSL.

Outlook has SSL. The issue AIUI is that Google require either OAuth 2.0
or 2-stage authentication or user's agreement to use "less secure apps".
Does Thunderbird now have OAuth 2.0?
--
Robin
reply to address is (meant to be) valid

On 05/04/15 19:20, Roger Mills wrote:
On 05/04/2015 19:09, Huge wrote:
On 2015-04-05, Roger wrote:
I use Outlook as my main email client,

There's your problem, right there.


So what would *your* solution be - bearing in mind that Google claim
that virtually every email client that isn't one of their making is
insecure!

Use thunderbird...

Robin wrote:
Jonno wrote:
Roger Mills scribbled

On 05/04/2015 19:09, Huge wrote:
On 2015-04-05, Roger wrote:
I use Outlook as my main email client,
There's your problem, right there.

So what would *your* solution be - bearing in mind that Google claim
that virtually every email client that isn't one of their making is
insecure!

Thunderbird works and has SSL.

Outlook has SSL. The issue AIUI is that Google require either OAuth 2.0
or 2-stage authentication or user's agreement to use "less secure apps".
Does Thunderbird now have OAuth 2.0?

The quickest way to answer that is:

1) Download Thunderbird source tarball.
2) Extract just the TAR file, not the 125,000 files inside.
3) Use a hex editor.

Oauth2 is present.

http://i61.tinypic.com/1zlw21e.gif

If you attempt to unpack source and use Windows search of the
contents, around 67,000 files have the wrong line endings
and a text search will ignore the file contents. Hex editing
a TAR file, is a lot faster for a basic "is it even mentioned"
check. It would probably take half the day, to identify the
actual correct source file.

Paul