Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

"The only way for a reporter to look at a politician is down." -- H. L. Mencken

computers / alt.comp.software.thunderbird / Re: Does anyone vet Thumnderbird add-ons from Github?

SubjectAuthor
* Does anyone vet Thumnderbird add-ons from Github?Stan Brown
+* Re: Does anyone vet Thumnderbird add-ons from Github?Dave Royal
|`- Re: Does anyone vet Thumnderbird add-ons from Github?Stan Brown
`* Re: Does anyone vet Thumnderbird add-ons from Github?David E. Ross
 `* Re: Does anyone vet Thumnderbird add-ons from Github?Brian Gregory
  `- Re: Does anyone vet Thumnderbird add-ons from Github?David E. Ross

1
Does anyone vet Thumnderbird add-ons from Github?

<MPG.4057849c2b7467da9902bd@news.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3624&group=alt.comp.software.thunderbird#3624

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: the_stan_brown@fastmail.fm (Stan Brown)
Newsgroups: alt.comp.software.thunderbird
Subject: Does anyone vet Thumnderbird add-ons from Github?
Date: Sun, 10 Mar 2024 09:50:14 -0700
Organization: Oak Road Systems
Lines: 11
Message-ID: <MPG.4057849c2b7467da9902bd@news.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Trace: individual.net I4elwHaB4IH65qBcCVn8pg4eqjaBSMsiF/Aw+I3bLb3xsSKlxo
Cancel-Lock: sha1:uSIFFKNNLXymrTvKn+4yYXpGEiw= sha256:W4ComRio0QuFWsFgdaqefwf5Ps4nOwfXumn5uP+MIL8=
User-Agent: MicroPlanet-Gravity/3.0.11 (GRC)
 by: Stan Brown - Sun, 10 Mar 2024 16:50 UTC

I was about to load an add-on, but then I noticed it's from Github. I
got to it via add-ons search within Thunderbird. Does that mean
someone at Thunderbird has "passed" it?

VirusTotal says it's clean, but I'm not sure that means much on an
add-on.

--
Stan Brown, Tehachapi, California, USA https://BrownMath.com/
Shikata ga nai...

Re: Does anyone vet Thumnderbird add-ons from Github?

<usku24$33mr2$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3625&group=alt.comp.software.thunderbird#3625

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: dave@dave123royal.com (Dave Royal)
Newsgroups: alt.comp.software.thunderbird
Subject: Re: Does anyone vet Thumnderbird add-ons from Github?
Date: Sun, 10 Mar 2024 18:27:15 +0000 (GMT)
Organization: news.eternal-september.org
Lines: 16
Message-ID: <usku24$33mr2$1@dont-email.me>
References: <MPG.4057849c2b7467da9902bd@news.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 10 Mar 2024 18:27:16 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ae1881f9276fae11fa540496780bfa96";
logging-data="3267426"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1854SDIJplC+k3EuoSkgz7x"
Cancel-Lock: sha1:BmCSRbRfr3iN3wWTq5CF7bkpbak=
X-Newsreader: Mod.PiaoHong.Usenet.Client:2.02.M16
 by: Dave Royal - Sun, 10 Mar 2024 18:27 UTC

Stan Brown <the_stan_brown@fastmail.fm> Wrote in message:

>
> I was about to load an add-on, but then I noticed it's from Github. I
> got to it via add-ons search within Thunderbird. Does that mean
> someone at Thunderbird has "passed" it?
>
> VirusTotal says it's clean, but I'm not sure that means much on an
> add-on.

No. There's an automated validation when you upload it - a scan
for disallowed code and a check on included libraries for
example. And they say it might be subject to a human review and
rejection later.
--
Remove numerics from my email address.

Re: Does anyone vet Thumnderbird add-ons from Github?

<usl7vo$35s7k$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3626&group=alt.comp.software.thunderbird#3626

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nobody@nowhere.invalid (David E. Ross)
Newsgroups: alt.comp.software.thunderbird
Subject: Re: Does anyone vet Thumnderbird add-ons from Github?
Date: Sun, 10 Mar 2024 14:16:38 -0700
Organization: I am @ David at rossde dot com.
Lines: 34
Message-ID: <usl7vo$35s7k$1@dont-email.me>
References: <MPG.4057849c2b7467da9902bd@news.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 10 Mar 2024 21:16:40 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ed4d9e8bad09499c8aebbfb82f6e3da9";
logging-data="3338484"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/iF4/+4OxHv+tB2ExvDw1o"
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101
Thunderbird/52.9.1
Cancel-Lock: sha1:lqE4dv2GBdoxcsKkoviRPIo+AOw=
Content-Language: en-US
In-Reply-To: <MPG.4057849c2b7467da9902bd@news.individual.net>
 by: David E. Ross - Sun, 10 Mar 2024 21:16 UTC

On 3/10/2024 9:50 AM, Stan Brown wrote:
>
> I was about to load an add-on, but then I noticed it's from Github. I
> got to it via add-ons search within Thunderbird. Does that mean
> someone at Thunderbird has "passed" it?
>
> VirusTotal says it's clean, but I'm not sure that means much on an
> add-on.
>

I am not aware of any DNS that provides the privacy of a VPN.

I scan every new application and update to an application I already
installed with three different anti-virus applications: AVG AntiVirus,
Malwarebytes, and Microsoft Security Essentials. I even scan updates to
those three; but I do not scan updates to the virus definitions, which
are data and not executables. For me, "application" includes add-ons to
SeaMonkey and Thunderbird.

All this means that I download a complete off-line installer file, scan,
and then disconnect from the Internet while installing. If only a stub
installer is available after I have unsuccessfully searched for an
off-line installer, I must then leave my Internet connection active; in
that case, AVG AntiVirus also remains active during the installation
(and generally, not just then).

--
David E. Ross
<http://www.rossde.com/>

Demonstrators worldwide are demanding that Israel stop
fighting in Gaza. Why does it seem that no one is demanding
that Hamas stop fighting? And where are the demonstrations
against Russia fighting in the Ukraine.

Re: Does anyone vet Thumnderbird add-ons from Github?

<l56o40Fijg0U1@mid.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3627&group=alt.comp.software.thunderbird#3627

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: void-invalid-dead-dontuse@email.invalid (Brian Gregory)
Newsgroups: alt.comp.software.thunderbird
Subject: Re: Does anyone vet Thumnderbird add-ons from Github?
Date: Sun, 10 Mar 2024 21:47:44 +0000
Organization: https://www.Brian-Gregory.me.uk/
Lines: 9
Message-ID: <l56o40Fijg0U1@mid.individual.net>
References: <MPG.4057849c2b7467da9902bd@news.individual.net>
<usl7vo$35s7k$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net 3wOtGAH+K0iNjLW6gADTeglKNeYjeKZUAdkmTtkihY0SpX9MtS
Cancel-Lock: sha1:/nkmodn6vnHJQYjghyWNczlyudQ= sha256:9gcHzS2T+l+dNZawzHjoQ7RFAuUbbxRVZ6QP7SKZFac=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <usl7vo$35s7k$1@dont-email.me>
 by: Brian Gregory - Sun, 10 Mar 2024 21:47 UTC

On 10/03/2024 21:16, David E. Ross wrote:
> I am not aware of any DNS that provides the privacy of a VPN.

What?
Nobody has mentioned DNS or VPN.

--
Brian Gregory (in England).

Re: Does anyone vet Thumnderbird add-ons from Github?

<MPG.4058da6a78e962c89902be@news.individual.net>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3643&group=alt.comp.software.thunderbird#3643

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!nntp.comgw.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: the_stan_brown@fastmail.fm (Stan Brown)
Newsgroups: alt.comp.software.thunderbird
Subject: Re: Does anyone vet Thumnderbird add-ons from Github?
Date: Mon, 11 Mar 2024 10:08:33 -0700
Organization: Oak Road Systems
Lines: 21
Message-ID: <MPG.4058da6a78e962c89902be@news.individual.net>
References: <MPG.4057849c2b7467da9902bd@news.individual.net> <usku24$33mr2$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Trace: individual.net emgXUPFSpeEpcJIVqO4K2wk8zeVgYoSLj0WjRZfa4pMPf+HImR
Cancel-Lock: sha1:vhOvCeUEz5KxLSS+qrZqgQTwgF4= sha256:Dhug6M0E4QZ7d8IKZx/lwK30rQt3DkYFUFgzoXeFFCk=
User-Agent: MicroPlanet-Gravity/3.0.11 (GRC)
 by: Stan Brown - Mon, 11 Mar 2024 17:08 UTC

On Sun, 10 Mar 2024 18:27:15 +0000 (GMT), Dave Royal wrote:
>
> Stan Brown <the_stan_brown@fastmail.fm> Wrote in message:
>
> > I was about to load an add-on, but then I noticed it's from Github. I
> > got to it via add-ons search within Thunderbird. Does that mean
> > someone at Thunderbird has "passed" it?
> >
> > VirusTotal says it's clean, but I'm not sure that means much on an
> > add-on.
>
> No. There's an automated validation when you upload it - a scan
> for disallowed code and a check on included libraries for
> example. And they say it might be subject to a human review and
> rejection later.

Thanks, Dave!

--
Stan Brown, Tehachapi, California, USA https://BrownMath.com/
Shikata ga nai...

Re: Does anyone vet Thumnderbird add-ons from Github?

<usnkr5$3pdit$1@dont-email.me>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=3648&group=alt.comp.software.thunderbird#3648

  copy link   Newsgroups: alt.comp.software.thunderbird
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nobody@nowhere.invalid (David E. Ross)
Newsgroups: alt.comp.software.thunderbird
Subject: Re: Does anyone vet Thumnderbird add-ons from Github?
Date: Mon, 11 Mar 2024 12:08:21 -0700
Organization: I am @ David at rossde dot com.
Lines: 19
Message-ID: <usnkr5$3pdit$1@dont-email.me>
References: <MPG.4057849c2b7467da9902bd@news.individual.net>
<usl7vo$35s7k$1@dont-email.me> <l56o40Fijg0U1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 11 Mar 2024 19:08:22 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="a73a3e1616f3c5c0abaf35f971d2f4f9";
logging-data="3978845"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19nsLkDzVLUyFMmDMvpnK/Y"
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101
Thunderbird/52.9.1
Cancel-Lock: sha1:r8VTF4sTrLMhGVwMgR1w0yfGCBs=
In-Reply-To: <l56o40Fijg0U1@mid.individual.net>
Content-Language: en-US
 by: David E. Ross - Mon, 11 Mar 2024 19:08 UTC

On 3/10/2024 2:47 PM, Brian Gregory wrote:
> On 10/03/2024 21:16, David E. Ross wrote:
>> I am not aware of any DNS that provides the privacy of a VPN.
>
> What?
> Nobody has mentioned DNS or VPN.
>

Oops! I was thinking about another post in a different newsgroup when I
added that.

--
David E. Ross
<http://www.rossde.com/>

Demonstrators worldwide are demanding that Israel stop
fighting in Gaza. Why does it seem that no one is demanding
that Hamas stop fighting? And where are the demonstrations
against Russia fighting in the Ukraine.

computers / alt.comp.software.thunderbird / Re: Does anyone vet Thumnderbird add-ons from Github?

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor