Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.software.thunderbird > #876

Re: dat & msf versus mbox

Show all headers | View raw

Bill Bradshaw wrote:
> I do not allow messages to come in as HTML but only as text and only send
> messages as text.  So where would IE come in?  I also disconnect from the
> internet when I am not actively using the internet.

You control how you view the msg, not how it 'comes in'.  It comes in 
(into OE storage) as it has been constructed, including html and .doc 
macros.  OE will use/ exercise/ its IE browser engine whenever it wants 
to; you don't actually control that in configuring how you choose to 
view.  OE will activate its 'viewer' (ie browser engine) even when an 
item/msg is 'simply' located in its message pane, you don't even have to 
'open' the msg.

It is true that viewing as plaintext is safer than viewing as html, 
which html rendering 'operation' turns loose the evil which is being 
held in that particular OE store which you download from the server, but 
it would be better if the various vulnerabilities didn't exist.

Depending on which Tb function you are using, such as nntp, unlike OE Tb 
doesn't actually store the msg/s you see in the thread pane, but 
accesses the viewed/opened msg into a cache when it is accessed.  Until 
then only a subset of the msg headers from the overview is stored.

The situation w/ POP vs IMAP is different.

I'm not saying that it is impossible to handle malwared msg/s w/ OE, 
because I've done it a lot, just that one needs to be wary.

-- 
Mike Easter

Back to alt.comp.software.thunderbird | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

dat & msf versus mbox "Bill Bradshaw" <bradshaw@gci.net> - 2021-07-14 13:31 -0800
  Re: dat & msf versus mbox WaltS48 <schw01@invalid.net> - 2021-07-14 17:58 -0400
    Re: dat & msf versus mbox "Bill Bradshaw" <bradshaw@gci.net> - 2021-07-14 14:05 -0800
    Re: dat & msf versus mbox Bears <Bears@invalid.com> - 2021-07-14 18:55 -0400
      Re: dat & msf versus mbox Wolf K <wolfmac@sympatico.ca> - 2021-07-14 19:45 -0400
  Re: dat & msf versus mbox Mike Easter <MikeE@ster.invalid> - 2021-07-15 12:03 -0700
    Re: dat & msf versus mbox Mike Easter <MikeE@ster.invalid> - 2021-07-15 13:57 -0700
      Re: dat & msf versus mbox Mike Easter <MikeE@ster.invalid> - 2021-07-15 14:53 -0700
      Re: dat & msf versus mbox "Bill Bradshaw" <bradshaw@gci.net> - 2021-07-15 14:02 -0800
        Re: dat & msf versus mbox Mike Easter <MikeE@ster.invalid> - 2021-07-15 15:36 -0700

csiph-web