Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.software.thunderbird > #343

Re: Thunderbird 3.1.20

Followups directed to: alt.comp.software.thunderbird

Show all headers | View raw

On 27 Apr 2021 23:36:47 -0400 Michael Trew wrote:
>I'm currently using Thunderbird 3.1.20 - have been for years.  I use it 
>as my primary e-mail client for 3 accounts as well as Eternal September 
>Usenet.  Some people have harassed me that it's not secure or safe to 
>use, but it seems to still work fine for me.  Is there any significant 
>risk to continue using this version?

I think the risk is quite small - assumingly you're not allowing 
javascript to run in html emails (can v3 run javascript?),  limit 
display to simple html, and don't use s/mime encryption. If you look 
at the security bugs that are fixed in Firefox/Gecko and inherited by 
Thunderbird, most of them are not exploitable on a non-script-enabled 
instance of TB. Does anybody know of one that is?

It presumably won't render some html emails correctly if they use newer 
html or css, but so long as it's readable that doesn't matter much.

I suspect it would be from vulnerabilities in TB itself, rather than 
Gecko, that you might be at risk. For example, maybe there was a bug, 
in mime-attachment handling say, that could be exploited to inject 
malware into Windows, and maybe that's been fixed since version 2. Was 
there such a bug, and if there was is anybody still exploiting it? 
No idea. And you're avoiding any such bugs introduced since :-)

You may not be able to use more recent and secure protocols for email 
account authentication and secure data transfer. But that depends on 
your email provider, and you can assess that risk yourself. One day 
you might find it won't connect.

Addons can have vulnerabilities too - possibly deliberate. I would 
look askance at any update.
-- 
(Remove numerics from email address)

Back to alt.comp.software.thunderbird | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-04-27 23:36 -0400
  Re: Thunderbird 3.1.20 Torsten Villnow <t.villnow@gmail.com> - 2021-04-28 08:48 +0200
    Re: Thunderbird 3.1.20 Wilf <wilf@postingx.uk> - 2021-04-28 17:39 +0100
  Re: Thunderbird 3.1.20 Teddy-Bears <Bears@invalid.com> - 2021-04-28 07:39 -0400
    Re: Thunderbird 3.1.20 Ken Whiton <kenwhiton@surfglobal.net.INVAL> - 2021-04-30 22:53 -0400
      Re: Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-05-01 17:41 -0400
        Re: Thunderbird 3.1.20 Ken Whiton <kenwhiton@surfglobal.net.INVAL> - 2021-05-03 00:06 -0400
    Re: Thunderbird 3.1.20 Miguel Tomar Nogueira <mnogueira@mail.telepac.pt> - 2021-05-09 22:39 +0000
      Re: Thunderbird 3.1.20 Ken Blake <ken@invalidemail.com> - 2021-05-10 07:36 -0700
        Re: Thunderbird 3.1.20 The Real Bev <bashley101@gmail.com> - 2021-05-10 10:25 -0700
          Re: Thunderbird 3.1.20 WaltS48 <schw01@invalid.net> - 2021-05-10 13:43 -0400
          Re: Thunderbird 3.1.20 Ken Blake <ken@invalidemail.com> - 2021-05-10 10:43 -0700
          Re: Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-05-11 11:32 -0400
            Re: Thunderbird 3.1.20 Ken Blake <ken@invalidemail.com> - 2021-05-11 09:19 -0700
              Re: Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-05-11 12:59 -0400
            Re: Thunderbird 3.1.20 WaltS48 <schw01@invalid.net> - 2021-05-11 13:11 -0400
              Re: Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-05-13 01:03 -0400
  Re: Thunderbird 3.1.20 Dave Royal<dave@dave123royal.com> - 2021-04-28 11:58 +0000
    Re: Thunderbird 3.1.20 Michael Trew <mt999999@ymail.com> - 2021-04-28 13:59 -0400
  Re: Thunderbird 3.1.20 WaltS48 <schw01@invalid.net> - 2021-04-28 08:19 -0400
  Re: Thunderbird 3.1.20 "David E. Ross" <not_me@not_there.invalid> - 2021-04-28 08:24 -0700

csiph-web