[tor-talk] IMAPS login errors

[arnst at runbox.no]

Philipp Winter:
> On Sat, Feb 08, 2014 at 11:11:16PM +0000, arnst at runbox.no wrote:
>> I'm using IMAPS over Tor for email purposes.  Sporadically I get
>> 'password incorrect' errors which usually go away when I click 'Retry'.
>>  Is this some kind of MitM attack?
> 
> Real MitM attacks typically don't cause "password incorrect" error messages.

Yes, I thought not, but it's strange behavior nonetheless as it never
happens except over Tor with my provider, and it is always transient
(one, maybe two failed auths, then things work - it makes me suspicious).

> Incidentally, there are two exit relays whose IMAPS traffic is modified by
> "security" software:
> https://atlas.torproject.org/#details/E5A75EE11A35F9DAF74B13BBA9D3CF0AA8F3AD2D
> https://atlas.torproject.org/#details/B40A3DC61FD7C18B8FFFA62FFA98CA7AAF8D8107
> 
> The former uses a Fortinet device whereas the latter uses an antivirus scanner.

Is this not sufficient to get BadExit flag?

Arnst