[tor-talk] Towards a Torbutton for Thunderbird (torbutton-birdy)

[Mike Perry]

Thus spake Sukhbir Singh (sukhbir.in at gmail.com):

> > /* To block auto connect to mozilla */
> > user_pref("app.update.auto", false);
> 
> Done.

Yikes! Don't disable Thunderbird autoupdate like this without a damn
good reason, analysis, *and* alternatives. 

Otherwise, you're condemning the user to get owned as their client
gradually gets more and more exploitable from the date they install
Torbirdy.
 

-- 
Mike Perry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120514/c58cbd18/attachment.pgp>