full-disclosure - thunderbird privacy...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <122827b90506211018b2661c1@mail.gmail.com>
Date: Tue Jun 21 18:19:30 2005
From: stan.bubrouski at gmail.com (Stan Bubrouski)
Subject: thunderbird privacy...

This issue has been known for years and affected the pre-thunderbird
mail client that was part of the Mozilla suite.  It's nothing new. 
There's been bug reports filed for this in Mozilla's bugzilla probably
as far back as '99, and to my knowledge they do not consider it a
problem.

BTW in case anyone wasn't aware (this is common knowledge I think) you
can move mailboxs between Ximian Evolution and Mozilla Thunderbird
seemlessly if you were ever looking to switch between the two.

Best Regards,
sb

On 6/21/05, Bill Weiss <houdini+full-disclosure@...nspum.net> wrote:
> Thomas Springer(tuevsec@....net)@Tue, Jun 21, 2005 at 02:08:41PM +0200:
> > Tunderbird uses for every folder a pseudo-database with a big data-file
> > contining every mail and a corresponding index-file (*.msf, for
> > thunderbird) - just like every harddisk does. if you delete a message,
> > it gets deleted only in the index - this is fast and you won't see the
> > msg anymore in your app.
> >
> > this mbx-format is an ancient, but especially in the unix-world still
> > very common format to store emails.
> 
> Just a note:
> 
> This isn't the same as the common "mbox" format that UNIX mailers tend to
> use.  mbox is a flat file of email, and deleting an email removes it from
> the file.  What Thunderbird is doing is different.
> 
> Outlook does something very similar, at least through Outlook 2000.
> 
> --
> Bill Weiss
> 
> salary
>     a poorly disguised manipulation of the word slavery.
>     -- The Devil's Dictionary X
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>