Trouble with e-mail (webmail and Thunderbird)

Cusco a posé une question...
Hi!

I'm having problems checking my e-mail.

I usually check my e-mail on Thunderbird, with Torbirdy, using riseup hidden services. It has always worked, I've been using it this way for years. This afternoon after checking my e-mails for a few times successfully I suddenly got an error when downloading my e-mail. Thunderbird said that the server reported that my account was temporarily suspended. I thought that was weird and so I tried logging in through webmail to see if the same occurred. When I tried logging in through the webmail I got the error "Login failed". I got worried someone had hacked my account and changed the password, so I tried to reset the password and I was able to do it successfully. I changed my password and was able to login into account.riseup.net normally. But I still wasn't able to access my e-mail, either through webmail or the client, through the .onion service or clear net. Nothing. I kept trying every few minutes until Thunderbird finally managed to login into my account. It checked for new messages, said it had two new messages for download. But then I got a new error message on Thunderbird:

"The RETR command did not succeed. Error retrieving a message. Mail server zsolxunfmbfuq7wf.onion responded: Message 53 expunged."

I decided to give it another try on the webmail. I was able to login. My inbox says I have three unread messages, though it shows only one message on inbox (either read or unread, even though on the top it says "Messages 1 to 50 of 55") and this message is empty, with no sender, no subject, no body text.

If I click on the Spam folder, that states that I have two unread messages, the same thing happens: only one message, no subject, no sender, no body.

What the hell is happening? Can someone please help?

Bests!
Vote | 0
Cyanolyca turcosa ecua4944
Urraca De Cuello Negro a répondu...
Hi,

We had some problems with an e-mail server yesterday, and that can be part of the problem. As for myself the nature of the encrypted storage is very hard to debug so I need to ask other birds about this. Please hold on until somebody with more knowledge on the process can help this out :(
Vote | 0
Cusco a répondu...
Thanks! I'll wait!
Vote | 0
Cyanolyca turcosa ecua4944
Urraca De Cuello Negro a répondu...
Hi,

Sorry, because of the Tor dev meeting we only could talk about this issue today. It's on our highest priority because of the time it has passed. We have some questions

* Did you change your password using the alternate e-mail reset method?
* How many e-mail clients are connected to that account regularly? Which ones?

I'm sorry it has taken so many days to be able to work on this :(
Vote | 0
Cusco a répondu...
* I change my password through the alternate e-mail method.
* I connect to that account only through Thunderbird + Torbirdy on one single PC
Vote | 0
Cyanolyca turcosa ecua4944
Urraca De Cuello Negro a répondu...
Hi again!

When did you changed your password using the alternate e-mail method?
Vote | 0
Cusco a répondu...
Wed, 11 Oct 2017 20:54:54 +0000

That's from the e-mail header. :)
Vote | 0
Cusco a répondu...
Wed, 11 Oct 2017 20:54:54 +0000

That's from the e-mail header. :)
Vote | 0
Cusco a répondu...
Hi Urraca!
Any news?
Vote | 0
Cyanolyca turcosa ecua4944
Urraca De Cuello Negro a répondu...
Hi,

The reason why this happens is because you were using encrypted storage and reset your password. You lose the content of your e-mails when you this (that's why there is a warning text when you do the process).

So, part of e-mails are encrypted using your previous key and cannot be read anymore
Vote | 0
Cusco a répondu...
I was not worried to lose content of my e-mails, because I always download them and leave nothing on the server.

The question is, how can I access the new e-mails I received after I changed my password, or at least from now on, since I keep receiving e-mails but am not able to read them.

When I opened this ticket ten days ago I had three unread messages and now I have 125 and I cannot read any of them! I'm getting desperate here.
Vote | 0
Cyanolyca turcosa ecua4944
Urraca De Cuello Negro a répondu...
Hi,

I'm sorry, but there is nobody that can help in this situation as I can't fix it and the other birds are busy with in real life things.

This is the situation, there is a terrible bug in the reset password using the recovery e-mail. This should have been noticed if somebody tested was it was deployed, but nobody did, including me. So, now your account has been getting e-mail and encrypting them using the previous key and didn't generate a new one when you forced the password change. This is not affecting just you, more people faced the same situation and we didn't notice because we didn't understood their reports.

Now, I have 0 idea how to fix this. One option is if you remember your old password, try to change it back to it and see if you can read your e-mails.

Another one is that we rename the account and create a new one under cusco until there is something we can do to recover the last 10 days of e-mails.

I'm deeply sorry for the whole situation. Our irresponsibilities played a huge role in this mess and I do really feel powerless in what to do. We have disabled the account recovery by e-mail, but I really need the help from others to really fix this.
Vote | 0
Cusco a répondu...
Ok. Don't worry. You guys do a great job for the activist community and, at least in my case, I'm sure there's no damage done that cannot be remediated.

I don't remember my old password as I use a password manager to generate and store all my passwords.

I changed my username to cusco_backup. Now we need to create a new account for me with the username cusco. I tried to do it but the system says the username is already taken. I assume its a security measure to avoid that anyone impersonates somebody else. How do we proceed?
Vote | 0
Cusco a répondu...
Ok. Don't worry. You guys do a great job for the activist community and, at least in my case, I'm sure there's no damage done that cannot be remediated.

I don't remember my old password as I use a password manager to generate and store all my passwords.

I changed my username to cusco_backup. Now we need to create a new account for me with the username cusco. I tried to do it but the system says the username is already taken. I assume its a security measure to avoid that anyone impersonates somebody else. How do we proceed?
Vote | 0
Cusco a répondu...
Ok. Don't worry. You guys do a great job for the activist community and, at least in my case, I'm sure there's no damage done that cannot be remediated.

I don't remember my old password as I use a password manager to generate and store all my passwords.

I changed my username to cusco_backup. Now we need to create a new account for me with the username cusco. I tried to do it but the system says the username is already taken. I assume its a security measure to avoid that anyone impersonates somebody else. How do we proceed?
Vote | 0
Cusco a répondu...
Sorry for the repeated messages!
Vote | 0
Cusco a répondu...
Ok, I managed to do it. I had to remove cusco from my old account's aliases and then I was able to create a new cusco@riseup.net account.

So let me know when we can recover my e-mails from the old account.


Vote | 0