Re: javascript in thunderbird 3

EE wrote:
> JM wrote:
>> Joshua Cranmer wrote:
>>> JM wrote:
>>>> I have heard the developers are planning to remove javascript 
>>>> completely from thunderbird 3 in a way that you can't turn it back 
>>>> on at all. I don't think they should. Javascript should be left in 
>>>> TB 3 and I see no good reason for it to be removed.
>>>
>>> You have heard wrong.
>> No I haven't. Go ask Moz Champion (Dan) in the mozilla.general newsgroup.
> 
> Allowing javascript in email is risky anyway.  I do not allow that. 
> Using HTML email is risky enough in itself without adding more avenues 
> for malware to be dumped on you.


Utter nonsense!

Please point to a javascript exploit that can be used in Thunderbird 
right now!  You cannot.

The only ones you CAN point to are some 'proof of concept' types that as 
far as anyone knows, have never been used in the wild.

And while you are at it, please point to a HTML exploit that can be used 
in email!  Again you cannot.


Yet, on the flip side of the coin, I can point to over a 100,000 reasons 
(viruses/trojans/malware) that you are susceptable to if you open 
attachments.  Yet the developers are NOT making opening attachments 
impossible!

To use someone else's allegory

You have two roads
One road (javascript) road has never had a truck on it
The ONLY trucks that could use the road are sitting in dealers showrooms 
and have never been driven on the road.

The other road (attachments) has over 100,000 trucks on it.
They appear out of no-where, and some have caused over 30 million 
accidents. They are always on the road.

Yet, YOU need to be protected against Javascript trucks - in such a 
manner that even if you wanted to, you couldn't cross the road!
But YOU don't need to be protected against Attachment trucks at all!


So enough of this NONSENSE about javascript being a danger.
With Javascript you have a couple of dozen trucks in the showrooms, 
that, if they were ever used, could possibly hit you when crossing the road.
But with Attachments, it is OKAY for you to cross that road (if you want 
to) even tho there are over 100,000 attachment trucks travelling the 
road, and some of these trucks have been known to hit millions of people 
and cause 6 billion dollars of damage (I Love You virus)

Yet you are afraid of javascript?