Mozilla Thunderbird still doesn’t “get” anti-virus protection

Two and a half years ago, I wrote a post describing a problem I had been having when Rochelle migrated to Mozilla Thunderbird for email, and Norton Anti-Virus was corrupting her Inbox. The gist of the post was that there didn’t seem to be a good anti-virus solution that worked well with Thunderbird.

A couple weeks ago a comment defending Thunderbird came in on the post. I started to respond in another comment, but because the attitude expressed by the commentor is so prevalent in software, I wanted to respond more publicly.

Here’s the meat of the comment (or read in full):

The problem with virus checking in Thunderbird is actually not Thunderbird. It the strategy you are using to scan for email viruses. […] If your antivirus program doesn’t have a function to scan email as it’s downloaded and prior to hitting your inbox, get a real antivirus solution that does. Let’s not be bad mouthing Thunderbird for something you are not doing appropriately in the situation you have.

Well, at the simplest level, this is correct, it’s really just a matter of configuration. But on other levels this philosophy — that the features are there to solve the problem, the user just needs to find and configure them — is not a very customer-friendly one. You could argue that it’s the opposite. There are very few people out there looking to buy “anti-virus software with an email proxy or plug-in to scan incoming emails.” They just want “safe, virus-free email.” By itself, Thunderbird still does not provide this.

And, in spite of 2½ years passing since I wrote the original post, the software and the web site still do not provide any useful information about how to achieve “safe email.” The only official information about anti-virus protection I found today is the FAQ Is Thunderbird susceptible to e-mail viruses?, which still has the same essentially useless information I noted 2½ years ago. On a very real level, the level at which most people will experience the product, getting “safe email” with Thunderbird is a challenge that most people will not be able to meet.

A person can say “don’t bad mouth Thunderbird,” but what they’re really saying is “people who aren’t smart enough to figure out this Thunderbird + anti-virus stuff for themselves should use something else.” I wonder what the response would be if the Thunderbird project posted those words on their web site, instead of the useless words in the FAQ?

Final note: Rochelle’s solution to the dilemma was to switch to Gmail. Works great, and virus-free.

Moving to Apple Mail?

Well, after a long year+ of teasing and waiting, it seems that the Cocoa version of Eudora for Mac OS X was a chimera. Today QUALCOMM announced that they are discontinuing commercial development of Eudora, and working with the Mozilla Foundation to move Eudora onto the Mozilla Thunderbird platform.

This announcement comes as something of a shock to me. After holding on waiting for Cocoa Eudora, this shift in strategy feels like the rug being yanked out. It’s going to take some time to digest, and I suppose we should wait for a few days before forming a mob and see if further details emerge. I would especially like to hear more about what “using the Thunderbird platform” really means, and what will be happening with the Eudora code base, especially the long-rumored Cocoa Eudora code.

For now, we’re a bit light on details. The spin on the announcement is that Eudora is being released from the constraints that come from being a commercial product, freed to grow, change, and thrive as an Open Source project. Who knows, that may happen — but it’ll be 6 months before we see a release that might give a clue as to how well it will work out. I confess, I’m skeptical, and not optimistic, for a couple reasons:

Continue reading “Moving to Apple Mail?”

Anti-virus for Mozilla Thunderbird?

For many years, Rochelle used Netscape Communicator for her email. A little over a year ago, I switched her to Mozilla Thunderbird, which is the code and user-interface successor to Communicator. For the most part it works very well, but it has one astonishing omission: its anti-virus capabilities are terrible.

For many years, Rochelle used Netscape Communicator for her email. About a year and a half ago, I switched her to Mozilla Thunderbird, which is the code and user-interface successor to Communicator. For the most part it works very well, but it has one astonishing omission: its anti-virus capabilities are terrible.

This is all the more remarkable given their tagline (“Reclaim Your Inbox”), and the second sentence of their Why Use Thunderbird blurb: “We designed Thunderbird to prevent viruses and to stop junk mail so you can get back to reading your mail.” Thunderbird is positioned as the more user-centric, safer alternative to Microsoft Outlook.

Continue reading “Anti-virus for Mozilla Thunderbird?”

Personal Survey of Anti-spam Tools

In the three or four years I’ve been fighting unwanted e-mail messages with better tools than the Delete key I’ve tried almost a dozen different tools. This is a quick survey of the ones I’ve used, and why I don’t (or do) still use them.

In the three or four years I’ve been fighting unwanted e-mail messages with better tools than the Delete key I’ve tried almost a dozen different tools. This is a quick (ha!) survey of the ones I’ve used, and why I don’t (or do) still use them.

My very first anti-spam tool was something called Mailfilter. I used it for my personal e-mail on Mac OS X, wrote about it here, and almost immediately afterwards lost a non-spam message to an aggressive keyword match. That was the end of Mailfilter. I can’t even remotely recommend it, as it’s just not intelligent enough (strict, single expression matching), and had zero safety net.

My next attempt at a solution was a utility called SpamFire. Like Mailfilter, it is a “pre-filter,” which means it would run before my e-mail client, download my mail, and skim out the spam. Unlike Mailfilter, it actually saved the trapped messages, so if it made a mistake, I could recover the message. It had plenty of other differences from Mailfilter, which I wrote about previously, and which made it so useful that it became the first anti-spam tool I paid for. But in the end I switched to a different tool because SpamFire was separate from my e-mail client, and that made it cumbersome to use.

Continue reading “Personal Survey of Anti-spam Tools”

Trying Thunderbird

Today I set up Mozilla Thunderbird, the new e-mail client that’s coming out of the Mozilla project. I wanted to give it a whirl, because I’m looking for a new e-mail client for Rochelle. She’s been using Netscape 4.7 to manage her e-mail, and it’s becoming more and more inadequate.

Today I set up Mozilla Thunderbird, the new e-mail client that’s coming out of the Mozilla project. I wanted to give it a whirl, because I’m looking for a new e-mail client for Rochelle. She’s been using Netscape 4.7 to manage her e-mail, and that application is getting old, and has a number of issues, mostly having to do with the fact that it’s now completely unsupported software. Also, Thunderbird has best-in-class spam controls, which is very important, since Rochelle is beginning to receive more and more spam.

Problem is, I haven’t found a better e-mail client than Netscape. Outlook and Outlook Express are out of the question. They are deeply insecure applications, and the number one vector for spreading computer viruses. (Mark my words, in the next 12 months there will be a malignant virus that will wipe Outlook users’ hard disks clean. It’s just a matter of time.) They are also spam-friendly applications (though an Open Source project, SpamBayes, gives Outlook robust anti-spam tools). People who voluntarily use Outlook or Outlook Express are stupid. IM!HO.

I actually bought Eudora Pro for Windows for Rochelle’s computer, on the basis of my experience using Eudora on the Mac for the last decade. But Eudora for Windows uses the obsolete Windows MDI interface paradigm, where all of the windows are contained in one “parent” window. It’s maddening, and a relic from the late 80s. The application has a number of other quirks, differences from the Mac version, to the point where I found it unusable.

So I’m evaluating Thunderbird, to see if it’s ready for Rochelle. I plan to use it regularly over the next few weeks, configured to manage one of my less-used e-mail accounts.

It’s a good thing it’s a less-used e-mail account, because already in my first 15 minutes, it’s clear that Thunderbird is still pretty raw (giving double meaning to the “trying” in this post’s title). Basic e-mail functionality is there, and the application seems solid (no crashing). This is the result of Thunderbird’s gestation as part of the Mozilla Suite. You can use, and even rely on Thunderbird. But there are a lot of fit-and-finish issues, which seem like small things, but add up to making it unsuitable — unenjoyable — for daily use.

Some examples:

  1. The first thing I want to do when setting up an e-mail client is turn off automatic downloading of HTML images. (Loading images in a spam message can tell the spammer your e-mail address is valid, resulting in a lot more spam.) There is a control for this in Thunderbird’s preferences, hidden a little too deeply (Advanced -> Privacy -> Block loading of remote images), but easily checked once you find it. So far so good.

    The problem is when you get messages with graphics from valid senders. The graphics don’t display, as per the general preference, but there’s no way to override that for the one valid message. This renders some messages unreadable.

    Solution: a toolbar button in the message window to download that message’s graphics.

  2. The default font settings render many messages a blur, with the text far too small to be legible. (This is on Mac OS X, it might be better on Windows or Linux.) The “minimum size” preference seems to do nothing, and the View -> Text Zoom menu option does not appear to be a global setting. I finally solved the issue by changing my Serif font setting to Lucida Grande, a sans serif font that is highly readable, even at small sizes. But all in all, there are far too many settings and options that affect text size and font choice, and it’s not at all clear what does what, how they interact, or how to accomplish specific goals with regard to text rendering.

    It reminds me of Don Norman’s description of refrigerator / freezer settings in The Design of Everyday Things. In most home refrigerators the freezer and refrigerator compartments share a single compressor, the key component of the cooling system. Because it’s shared, making changes to the freezer setting, e.g., setting it lower, can affect the refrigerator setting, making it lower too. So you turn up the refrigerator knob to keep your lettuce from freezing, but that makes the freezer less cold, and your ice cream oozes out of the carton. You have to fiddle and fuss to finally get to a balance you can live with.

    It’s a ridiculous thing for an end-user to have to deal with, and it happens because the designers give you controls that affect the system’s internals directly, instead of letting you choose a goal state (e.g., a specific temperature for each compartment), and have the system figure out how to achieve it. Product designers and programmers do this because it’s easy to build, and because they don’t see anything wrong with it. The problem is that users don’t think like programmers, and have trouble figuring things out.

    Thunderbird is supposed to be a simplified, easy-to-figure-out e-mail client, vs. the everything-but-the-kitchen-sink e-mail client in the Mozilla Suite. They have a ways to go with the text settings.

  3. Thunderbird makes some assumptions about my e-mail reading workflow that are wrong. If I open a message, read it, and then delete it, Thunderbird automatically opens the next message, in a window sized and positioned exactly like the first message.

    First of all, while this straight-through workflow may work for some people, it’s deeply distracting to me. I pick and choose my e-mails, working via priority order (or whim), not on the order the messages arrived. I suspect most sophisticated e-mail users do this. Auto-opening a message I would prefer to defer looking at just means I have to close it, and then right-click to mark the message as Unread. Pain in the ass. There appears to be no way to affect this behavior.

    The second issue with this is that Thunderbird’s screen redraws are extremely efficient. There is zero flicker when one message disappears and the other appears. Because the new message appears in the same place and is the same size, only the text changes. If you’re looking at a new message that is visually similar to the previous one — say, two text messages — you might not notice it was new, and think that you didn’t hit delete at all. Guess what you’d do then.

These are three examples, but I’ve seen many other issues. I can hold my nose and manage this low-priority e-mail account, but it’s clear that Thunderbird has a few more months of development in front of it before I’ll give it to Rochelle.