Yahoo: Difference between revisions

From MozillaZine Knowledge Base
Jump to navigationJump to search
No edit summary
 
 
(31 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Tbsuite}}
{{Tbsuite}}
__NOTOC__


Yahoo! provides a free POP and SMTP server if you have a webmail account in a non-USA yahoo domain (for example de.yahoo.com). If you are in the USA and you want a Yahoo POP account your choices are:
Yahoo! provides a free POP and SMTP server if you have a webmail account. This used to require you to have a webmail account in a non-USA yahoo domain (for example de.yahoo.com). A common workaround to get POP support if you lived in the USA was to change "Regional Site and Language" in Yahoo Webmail's account settings to Yahoo Asia, and then enable POP access in the POP & Forwarding section in Webmail options (you would still keep your existing email address and it doesn't change what language you use). However, that restriction has been removed and all of the features that used to be part of Yahoo’s Mail Plus product (disposable email addresses, POP email and mail forwarding) are now free. They have also increased the storage limit to 1TB.


* Use an extension such as the [http://webmail.mozdev.org/ Webmail extension]. The problem is that extensions like that "scrape the screen" in order to emulate a POP server. They frequently break when the format of a webmail page changes, are slow, and hard to debug.
Yahoo also has a free IMAP and SMTP server that officially only supports smartphones and Zimbra email clients. However, the Thunderbird account wizard supports creating a Yahoo IMAP account using the "Yahoo for Mobile" IMAP settings.  
* Have an ISP that provides that feature for free. AT&T frequently does that for example.
* Pay for an upgrade to Yahoo! Mail Plus. 
* Change "Regional Site and Language" in Yahoo Webmail's account settings to Yahoo Asia, and then enable POP access in the POP & Forwarding section in Webmail options. You still keep your existing email address and it doesn't change what language you use. See [http://information-technology-daily.blogspot.com/2011/07/yahoo-mail-free-pop-access.html this article] or [http://www.youtube.com/watch?v=qpB_jKP_B18 this YouTube video] for instructions. Yahoo might disable this feature some day, but its been working for about a year.


Yahoo also has a free IMAP and SMTP server that officially supports smartphones and Zimbra email clients. While its not officially supported by Mozilla, it works fine for most users if you use Thunderbird 3.1 or later. Thunderbird QA says Yahoo IMAP is not supported yet and discourages its use while waiting for Yahoo to provide a officially supported configuration. However, many people use it and its configuration has been added to the Mozilla database that the account wizard uses.
Before you add an account in Thunderbird:


Create a new account by pressing the Add Mail Account button in [[Menu_differences_in_Windows,_Linux,_and_Mac | Tools -> Account Settings -> Account Actions]]. It should default to creating a POP account with a SMTP server. If your ISP provides you a Yahoo account it may use mail servers with a different domain and want you to enter the full email address as the username. Otherwise configure it as follows (if you're not relying upon the account wizard to do this for you):
* Click on https://login.yahoo.com/account/security#other-apps (its the last item in the account security section in account information)
* Login to your Yahoo account and then turn on "Allow apps that use less secure sign-in"
* Log out of Yahoo.
 
If you don't do this you may get a "#MBR1212 Incorrect username or password" error or a "sending of password for user XYZ did not succeed" error when Thunderbird tries to log into the mail server. The exact wording of the error message has changed several times. [http://forums.mozillazine.org/viewtopic.php?f=39&t=3009335]. [https://help.yahoo.com/kb/SLN27791.html Ways to securely access Yahoo Mail] doesn't describe how Yahoo determines that a email client is insecure and/or obsolete, or what the "current security standards" are.
 
Create a new account by pressing the Add Mail Account button in [[Menu_differences_in_Windows,_Linux,_and_Mac | Tools -> Account Settings -> Account Actions]]. It will default to creating a POP account. If you want an IMAP account select the IMAP radio button. If your ISP provides you a Yahoo account it may use mail servers with a different domain and use the full email address as the username. Otherwise configure it as follows (if you're not relying upon the account wizard to do this for you):


==POP==
==POP==
Line 34: Line 36:
==IMAP==
==IMAP==
* Type: '''IMAP'''
* Type: '''IMAP'''
* Server Name: '''imap.mail.yahoo.com'''
* Server Name: '''imap.mail.yahoo.com'''  
:Use '''imap.mail.att.net''' if that doesn't work. Its not clear yet if the official mail server is going to change. [http://forums.mozillazine.org/viewtopic.php?p=14756615#p14756615]
* User Name: '''Just the portion of the email address to the left of the '@''''
* User Name: '''Just the portion of the email address to the left of the '@''''
* Port: '''993'''
* Port: '''993'''
Line 40: Line 43:
* Secure authentication: '''normal password'''
* Secure authentication: '''normal password'''


If you want a IMAP account you need to press the Manual Config button so that you can select IMAP and change the mail server.
If you are using an old version of Thunderbird and want an IMAP account you need to press the Manual Config button while creating the account so that you can select IMAP and change the mail server. In recent versions all you need to do is select the IMAP radio button.
 
The IMAP settings used to work fine. However, several people have run into a problem where Thunderbird will only find new mail in the inbox when it starts. [http://forums.mozillazine.org/viewtopic.php?f=39&t=2287493] If you get new mail later on and press the "Get Mail" button, open the folder, or wait until "Check for new mail every X minutes" is supposed to check for new mail it frequently doesn't find any, or may take a very long time to do so. This doesn't seem to be a version specific problem.
 
Yahoo has multiple mail servers, intended for different clients. imap.mail.yahoo.com is the generic one, zimbra.imap.mail.yahoo.com is meant for the Zimbra email client, winmo.imap.mail.yahoo.com for Windows Mobile smart phones, and android.imap.mail.yahoo.com for android smart phones. If you run into this problem use either '''android.imap.mail.yahoo.com''' or '''zimbra.imap.mail.yahoo.com'''.
 
If you change the mail server for an existing account that automatically changes the local directory setting (where files are stored). So if you want to do that look at Tools -> Account Settings -> Yahoo -> Server Settings -> Local Directory beforehand, copy it, and then restore it afterwards using the Browse button. This setting is near the bottom of the pane.


==IMAP works differently==
==IMAP works differently==
Line 55: Line 52:


IMAP accounts support hiding folders you don't want to see by not subscribing them. Thunderbird may automatically subscribe the inbox, sent, and bulk mail folders when it creates the Yahoo IMAP account. It will also automatically subscribe any new folder you create using Thunderbird. You can right click on the account name in the folder pane, select subscribe, and then choose from the list which folders to display. If you don't like the idea of using subscription to manage what folders you see, uncheck Tools -> Account Settings -> Yahoo -> Server Settings -> Advanced -> "Show only subscribed folders".
IMAP accounts support hiding folders you don't want to see by not subscribing them. Thunderbird may automatically subscribe the inbox, sent, and bulk mail folders when it creates the Yahoo IMAP account. It will also automatically subscribe any new folder you create using Thunderbird. You can right click on the account name in the folder pane, select subscribe, and then choose from the list which folders to display. If you don't like the idea of using subscription to manage what folders you see, uncheck Tools -> Account Settings -> Yahoo -> Server Settings -> Advanced -> "Show only subscribed folders".
==Characters are replaced by question marks==
(This problem appears to have been fixed by Yahoo, but it might break again so this section is kept as a precaution)
The Yahoo SMTP server can corrupt characters, replacing them with question marks. This is due to their incorrectly advertising 8bit capability. You may run into this if you have double spaces or use 8 bit characters (such as a umlaut , diaeresis or some type of accent mark) in messages. The workaround is to use the config editor (Tools -> Options -> Advanced -> General if you are using Windows) to toggle mail.strictly_mime from False to True. You can do that by entering mail.strictly_mime in the search field and then double clicking on its value. [https://forums.yahoo.net/t5/Sending/Yahoo-SMTP-server-advertising-8bit-capability-incorrectly-and/m-p/449275][http://forums.mozillazine.org/viewtopic.php?f=39&t=3038519]
==UID Fetch Server error==
This error can occur with Yahoo IMAP accounts. It seems to mainly occur when there is a problem fetching the contents of a message in the Spam, Bulk Mail or Trash folder. Deleting the folders contents, emptying the trash, and compacting the folders works around the problem. [http://forums.mozillazine.org/viewtopic.php?f=39&t=3033625]
==The POP3 email server (plus.pop.mail.yahoo.com) does not support UIDL or XTND or XLST==
The Yahoo POP server seems to have periodic problems where it returns a "''The POP3 email server (plus.pop.mail.yahoo.com) does not support UIDL or XTND or XLST, which are required to implement the "Leave on Server," "Maximum Message Size," or "Fetch Headers Only" options. To download your mail, turn off these options in the Server Settings for your mail server in the account settings window''." error message. This problem occurs with both plus.pop.mail.yahoo.com and pop.mail.yahoo.com.
When this occurs you can't download new messages. Sometimes this can be worked around by exiting and restarting Thunderbird. Other times you need to wait until Yahoo fixes the problem with the server (usually takes only a day). [http://linux.bigresource.com/Ubuntu-Thunderbird-suddenly-stops-downloading-messages-for-an-account--eUKyEhunx.html] [http://answers.yahoo.com/question/index?qid=20100219165859AAqqv8E]
Don't uncheck the "leave messages on server" checkbox as that will download all of the messages on the server (old and new) and delete the messages stored on the mail server. [http://answers.yahoo.com/question/index?qid=20100219165859AAqqv8E]
==[CLIENTBUG] SELECT command is not valid in this state==
Edit Tools -> Account Settings -> Yahoo -> Server settings -> Username to delete the domain name (@yahoo.com.xx....) from the email address. Yahoo wants just the portion of the email address to the left of the '@' as the username.
The problem can also occur if you don't enable "allow insecure apps" in the yahoo webmail settings.
[https://bugzilla.mozilla.org/show_bug.cgi?id=1394642 bug report]
==Can not subscribe folders==
Check if Tools -> Account Settings -> Server Settings -> Advanced -> "IMAP Server directory" is set to ''[Gmail]''. That will prevent Thunderbird from discovering your remote folders, even if "allow server to override these namespaces" is also checked. Delete ''[Gmail]'' and press the OK button.
==Two factor authentication==
[https://help.yahoo.com/kb/SLN26734.html Yahoo Account Key] is a optional two factor authentication that disables using your password and requires you to enter an "account key" that is sent to an app on your smartphone. Thunderbird doesn't support that. However, you can create a [https://help.yahoo.com/kb/SLN15241.html 3rd party app password] to use with Thunderbird, to work around that. You would need to delete your old password in Thunderbird, exit and restart to use that new password. If Yahoo Account Key is accidentally enabled and you want to disable it, see [https://help.yahoo.com/kb/fix-issues-account-key-sln25921.html You want to turn off Account key] and/or [https://www.lifewire.com/access-key-log-in-yahoo-1174444 How to Deal with Access Key Log-In to Yahoo! Mail]
==OAuth2 authentication==
Yahoo is starting to display warnings for some users that are using a ISP that uses Yahoo for email such as Frontier, telling them they should use OAuth2:
: Access your mail via frontier.yahoo.com or with a mail client that supports OAuth
: Upgrade your current mail client to a version that supports OAuth
: Visit https://security.frontier.com/ and create an app-specific password
The developers haven't been able to find a contact in the Yahoo mail team to discuss adding OAuth support in Thunderbird accounts. This problem is not limited to Thunderbird/SeaMonkey. If you run into this problem an interim workaround might be to generate a app-specific password for Thunderbird and use it instead of the normal password. [https://bugzilla.mozilla.org/show_bug.cgi?id=1293958]
==Security news==
*[https://www.theguardian.com/technology/2016/dec/14/yahoo-hack-security-of-one-billion-accounts-breached Yahoo hack: 1bn accounts compromised by biggest data breach in history]
*[https://arstechnica.com/information-technology/2017/02/yahoo-reveals-more-breachiness-to-users-victimized-by-forged-cookies/ Yahoo reveals more breachiness to users victimized by forged cookies]
*[https://www.the-parallax.com/2016/12/16/yahoo-not-safe-former-engineer-says/ ‘Yahoo is not safe to use,’ former company engineer says]
*[https://www.theguardian.com/technology/2016/oct/04/yahoo-secret-email-program-nsa-fbi Yahoo 'secretly monitored emails on behalf of the US government' ]
"A big part of the problem that Ottenheimer and Avivah Litan, vice president and analyst at Gartner Research, describe is that Yahoo simply isn’t willing to invest in security."
"Forged cookies could allow an intruder to access users' accounts without a password. Based on an ongoing Yahoo investigation, we believe an unauthorised third party accessed our proprietary code to learn how to forge cookies."
"Stolen user account information may have included names, email addresses, phone numbers, dates of birth, "hashed" passwords and, in some cases, encrypted or unencrypted security questions and answers" [http://www.theinquirer.net/inquirer/news/3001275/delete-your-account-yahoo-admits-to-another-hack-affecting-one-billion-customers]
"Yahoo last year secretly built a custom software program to search all of its customers’ incoming emails for specific information at the request of US intelligence officials, according to a report". "When Stamos found out that Mayer had authorized the program, he resigned as chief information security officer and told his subordinates that he had been left out of a decision that hurt users’ security, sources said. Due to a programming flaw, he told them, hackers could have accessed the stored emails."
[https://arstechnica.com/security/2017/05/yahoobleed-flaw-that-festered-for-years-leaked-private-yahoo-mail-data/ “Yahoobleed” flaw leaked private e-mail attachments and credentials] discusses security bugs caused by not installing patches.


==See also==
==See also==
Line 63: Line 118:
==External links==
==External links==


* [https://bugzilla.mozilla.org/show_bug.cgi?id=661510 Yahoo IMAP server intermittently doesn't allow any login types]
* Meta tracking bug report for [https://bugzilla.mozilla.org/show_bug.cgi?id=614826 Yahoo IMAP peculiarities].
* [https://bugzilla.mozilla.org/show_bug.cgi?id=661510 Yahoo IMAP server intermittently doesn't allow any login types] bug report.
* [https://bugzilla.mozilla.org/show_bug.cgi?id=710507 If Yahoo! IMAP server, when "show only subscribed folders" is disabled, Thunderbird does not show folder expand button nor child folders until folder is double-click'ed] bug report.
* [https://bugzilla.mozilla.org/show_bug.cgi?id=610264 UID FETCH: Too many messages for request when accessing yahoo mail (Yahoo! IMAP limits number of mails in FETCH command for HEADER. Max=5000)] bug report.
* [https://bugzilla.mozilla.org/show_bug.cgi?id=635601 Cannot connect to SMTP server when using yahoo mail with postfix @ymail.com] bug report.
* [https://bugzilla.mozilla.org/show_bug.cgi?id=493064#c35 imap.mail.yahoo.com is now available] bug report. The official position used to be that Yahoo IMAP was not supported, though it worked. That has changed. The account wizard supports it, and Yahoo IMAP is listed in the [http://www.mozilla.org/en-US/thunderbird/features/email_providers.html list of free email providers]. It looks like it might also be an option in the new account provisioning support (get a new email address using Thunderbird).
 
* [http://community.bt.com/t5/Other-BB-Queries/Bt-Yahoo-Premium-mail-sub-account-can-t-use-POP3/td-p/379199 Sending of password did not succeed. Mail server pop.mail.yahoo.com responded 'Access to this service is not permitted']
* [http://techcrunch.com/2013/10/08/yahoo-updates-mail-on-all-platforms-with-new-design-that-mirrors-award-winning-weather-ios-app/ Yahoo Mail Gets Cross-Platform Themes, 1TB of Storage, ‘Mail Plus’ Features For All And Better Conversations]
* [http://forums.mozillazine.org/viewtopic.php?f=39&t=2287493 Not downloading IMAP messages without a restart]
Temporary problems (fixed) with Yahoo mail server:
* [https://getsatisfaction.com/mozilla_messaging/topics/all_sent_messages_regarded_as_abuse All sent messages regarded as abuse] [http://forums.mozillazine.org/viewtopic.php?f=39&t=2441147]
 
Yahoo settings:
 
* [http://help.yahoo.com/l/us/yahoo/mail/classic/mailplus/pop/pop-51.html Yahoo POP settings]
* [http://help.yahoo.com/l/us/yahoo/mail/classic/mailplus/pop/pop-51.html Yahoo POP settings]
* [http://help.yahoo.com/l/us/yahoo/smallbusiness/bizmail/pop/pop-33.html Yahoo Business account (pop.bizmail.yahoo.com) settings]
* [http://help.yahoo.com/l/us/yahoo/mobile/comms/mail/imap-01.html Yahoo Mobile settings]
* [http://help.yahoo.com/l/us/yahoo/mobile/comms/mail/imap-01.html Yahoo Mobile settings]


[[Category:E-mail account setup (Thunderbird)]]
[[Category:E-mail account setup (Thunderbird)]]

Latest revision as of 01:04, 23 February 2018

This article was written for Thunderbird but also applies to Mozilla Suite / SeaMonkey (though some menu sequences may differ).

Yahoo! provides a free POP and SMTP server if you have a webmail account. This used to require you to have a webmail account in a non-USA yahoo domain (for example de.yahoo.com). A common workaround to get POP support if you lived in the USA was to change "Regional Site and Language" in Yahoo Webmail's account settings to Yahoo Asia, and then enable POP access in the POP & Forwarding section in Webmail options (you would still keep your existing email address and it doesn't change what language you use). However, that restriction has been removed and all of the features that used to be part of Yahoo’s Mail Plus product (disposable email addresses, POP email and mail forwarding) are now free. They have also increased the storage limit to 1TB.

Yahoo also has a free IMAP and SMTP server that officially only supports smartphones and Zimbra email clients. However, the Thunderbird account wizard supports creating a Yahoo IMAP account using the "Yahoo for Mobile" IMAP settings.

Before you add an account in Thunderbird:

If you don't do this you may get a "#MBR1212 Incorrect username or password" error or a "sending of password for user XYZ did not succeed" error when Thunderbird tries to log into the mail server. The exact wording of the error message has changed several times. [1]. Ways to securely access Yahoo Mail doesn't describe how Yahoo determines that a email client is insecure and/or obsolete, or what the "current security standards" are.

Create a new account by pressing the Add Mail Account button in Tools -> Account Settings -> Account Actions. It will default to creating a POP account. If you want an IMAP account select the IMAP radio button. If your ISP provides you a Yahoo account it may use mail servers with a different domain and use the full email address as the username. Otherwise configure it as follows (if you're not relying upon the account wizard to do this for you):

POP

  • Type: POP
  • Server Name: pop.mail.yahoo.com or plus.pop.mail.yahoo.com if you are using Yahoo! Mail Plus
  • User Name: Just the portion of the email address to the left of the '@'
  • Port: 995
  • Secure connection: SSL/TLS
  • Secure authentication: normal password

You used to be able to use the mail server for your domain (such as pop.mail.yahoo.de) but that broke. A email address in a different domain will still work using pop.mail.yahoo.com.

SMTP

  • Server Name: smtp.mail.yahoo.com
  • User Name: Just the portion of the email address to the left of the '@'
  • Port: 465
  • Secure connection: SSL/TLS
  • Secure authentication: normal password

Its also possible to use port 587 with secure connection set to none.

IMAP

  • Type: IMAP
  • Server Name: imap.mail.yahoo.com
Use imap.mail.att.net if that doesn't work. Its not clear yet if the official mail server is going to change. [2]
  • User Name: Just the portion of the email address to the left of the '@'
  • Port: 993
  • Secure connection: SSL/TLS
  • Secure authentication: normal password

If you are using an old version of Thunderbird and want an IMAP account you need to press the Manual Config button while creating the account so that you can select IMAP and change the mail server. In recent versions all you need to do is select the IMAP radio button.

IMAP works differently

IMAP accounts let you access all of the webmail folders. It treats folders on the mail server (remote folders) as if they were local folders, so that you can copy/move messages to/from them.

It has a client-server view of the world rather than a download-centric one. While you can use the folders as if they are local folders it actually only downloads the headers (not the messages) to the mail folder on the hard disk. That means whenever you open a message it fetches it again from the mail server, so its a poor choice if you have a slow Internet connection. Thunderbird 3.0 added support for offline copies of the folders. This is enabled by default in Tools -> Account Settings -> Yahoo -> Synchronization & Storage. They are a useful way to backup the folders or to read messages when working offline but they're ignored when you're working online. There is also a optional IMAP cache but it mainly just caches remote images, not messages.

IMAP accounts support hiding folders you don't want to see by not subscribing them. Thunderbird may automatically subscribe the inbox, sent, and bulk mail folders when it creates the Yahoo IMAP account. It will also automatically subscribe any new folder you create using Thunderbird. You can right click on the account name in the folder pane, select subscribe, and then choose from the list which folders to display. If you don't like the idea of using subscription to manage what folders you see, uncheck Tools -> Account Settings -> Yahoo -> Server Settings -> Advanced -> "Show only subscribed folders".

Characters are replaced by question marks

(This problem appears to have been fixed by Yahoo, but it might break again so this section is kept as a precaution)

The Yahoo SMTP server can corrupt characters, replacing them with question marks. This is due to their incorrectly advertising 8bit capability. You may run into this if you have double spaces or use 8 bit characters (such as a umlaut , diaeresis or some type of accent mark) in messages. The workaround is to use the config editor (Tools -> Options -> Advanced -> General if you are using Windows) to toggle mail.strictly_mime from False to True. You can do that by entering mail.strictly_mime in the search field and then double clicking on its value. [3][4]

UID Fetch Server error

This error can occur with Yahoo IMAP accounts. It seems to mainly occur when there is a problem fetching the contents of a message in the Spam, Bulk Mail or Trash folder. Deleting the folders contents, emptying the trash, and compacting the folders works around the problem. [5]

The POP3 email server (plus.pop.mail.yahoo.com) does not support UIDL or XTND or XLST

The Yahoo POP server seems to have periodic problems where it returns a "The POP3 email server (plus.pop.mail.yahoo.com) does not support UIDL or XTND or XLST, which are required to implement the "Leave on Server," "Maximum Message Size," or "Fetch Headers Only" options. To download your mail, turn off these options in the Server Settings for your mail server in the account settings window." error message. This problem occurs with both plus.pop.mail.yahoo.com and pop.mail.yahoo.com.

When this occurs you can't download new messages. Sometimes this can be worked around by exiting and restarting Thunderbird. Other times you need to wait until Yahoo fixes the problem with the server (usually takes only a day). [6] [7]

Don't uncheck the "leave messages on server" checkbox as that will download all of the messages on the server (old and new) and delete the messages stored on the mail server. [8]

[CLIENTBUG] SELECT command is not valid in this state

Edit Tools -> Account Settings -> Yahoo -> Server settings -> Username to delete the domain name (@yahoo.com.xx....) from the email address. Yahoo wants just the portion of the email address to the left of the '@' as the username.

The problem can also occur if you don't enable "allow insecure apps" in the yahoo webmail settings.

bug report

Can not subscribe folders

Check if Tools -> Account Settings -> Server Settings -> Advanced -> "IMAP Server directory" is set to [Gmail]. That will prevent Thunderbird from discovering your remote folders, even if "allow server to override these namespaces" is also checked. Delete [Gmail] and press the OK button.

Two factor authentication

Yahoo Account Key is a optional two factor authentication that disables using your password and requires you to enter an "account key" that is sent to an app on your smartphone. Thunderbird doesn't support that. However, you can create a 3rd party app password to use with Thunderbird, to work around that. You would need to delete your old password in Thunderbird, exit and restart to use that new password. If Yahoo Account Key is accidentally enabled and you want to disable it, see You want to turn off Account key and/or How to Deal with Access Key Log-In to Yahoo! Mail

OAuth2 authentication

Yahoo is starting to display warnings for some users that are using a ISP that uses Yahoo for email such as Frontier, telling them they should use OAuth2:

Access your mail via frontier.yahoo.com or with a mail client that supports OAuth
Upgrade your current mail client to a version that supports OAuth
Visit https://security.frontier.com/ and create an app-specific password

The developers haven't been able to find a contact in the Yahoo mail team to discuss adding OAuth support in Thunderbird accounts. This problem is not limited to Thunderbird/SeaMonkey. If you run into this problem an interim workaround might be to generate a app-specific password for Thunderbird and use it instead of the normal password. [9]

Security news

"A big part of the problem that Ottenheimer and Avivah Litan, vice president and analyst at Gartner Research, describe is that Yahoo simply isn’t willing to invest in security."

"Forged cookies could allow an intruder to access users' accounts without a password. Based on an ongoing Yahoo investigation, we believe an unauthorised third party accessed our proprietary code to learn how to forge cookies."

"Stolen user account information may have included names, email addresses, phone numbers, dates of birth, "hashed" passwords and, in some cases, encrypted or unencrypted security questions and answers" [10]

"Yahoo last year secretly built a custom software program to search all of its customers’ incoming emails for specific information at the request of US intelligence officials, according to a report". "When Stamos found out that Mayer had authorized the program, he resigned as chief information security officer and told his subordinates that he had been left out of a decision that hurt users’ security, sources said. Due to a programming flaw, he told them, hackers could have accessed the stored emails."

“Yahoobleed” flaw leaked private e-mail attachments and credentials discusses security bugs caused by not installing patches.

See also

External links

Temporary problems (fixed) with Yahoo mail server:

Yahoo settings: