If you use "tor everything" option that means k-9 goes through tor which means you log in to your account from some random location in the world. In some cases that triggers a false flag: https://www.torproject.org/docs/faq.html.en#GmailWarning
Of course you can't be 100% sure it is false flag every time, so if you're using setup like that it is VERY important that you use very strong password that is very different from passwords you use on other sites and that is not stored digitally anywhere except in k-9. For desktop I suggest placing it only in KeyPass and nowhere else. Do all that and you rest assured those are false flags ;-) On Thursday, March 6, 2014 at 4:14:10 AM UTC+1, jack wrote: > > I have SSL/TLS for all my accounts set to always in k9's account > settings.. but just recently I connected to an insecure proxy(tor). When > connecting to an insecure proxy I never do anything that might expose any > of my passwords because I do know there are people who might monitor > packets on the other side. Except this time I accidentally manually synced > my k9 mail(force of habit kicked in). 2 minutes later I get notifications > from google saying that fraudulent attempts to access my accounts have been > blocked. > > I was completely confused until I saw I was still connected to the proxy.. > so I turned on 2 factor authentication on all of my accounts, and changed > the passwords for a few of them(I knew they couldn't get in anyway for the > few I didn't change). So I watched my text messages for my accounts which > didn't have their passwords changed and someone just kept trying to get in > for the next couple of hours/days at random intervals. > > My main concern is why the heck is this possible? If SSL is enabled > doesn't that mean my passwords are encrypted during transmission? Anyone > intercepting packets "should" see nothing but gibberish, right?? But then > how are they able to keep trying to get into my account? > > Would someone please explain this to me? > -- -- You received this message because you are subscribed to the K-9 Mail Users List. To post to this group, send email to [email protected] To unsubscribe, email [email protected] To report an issue with K-9 Mail, visit http://code.google.com/p/k9mail/issues/list For more options, visit this group at http://groups.google.com/group/k-9-mail --- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
