Live data from Hacker News

Why Some Security Experts Use Mutt

motherboard.vice.com

41–50 of 160 posts

Re: Why Some Security Experts Use Mutt

#41
post #8

Another reason is that it spawns a text editor. Typing emails in a text widget without proper editing capabilities can be irritating.

Thunderbird and, I think, Kmail allow you to specify an external editor (probably vim, Emacs users would use something inside Emacs)

Re: Why Some Security Experts Use Mutt

#42

Thunderbird has, or had, a plain text mode and a "Simple HTML" mode (other than only recognizing a subset of HTML, I don't know what it does) for displaying messages. You can leave it in plain text mode and, in the event you really need to view HTML, switch it to "Simple" or full HTML. It also can block remote images and, I think, all JavaScript. The wonderful Nostalgy add-on provides a very responsive keyboard inter…

I use Thunderbird and keep it set as text only for sending and remote images loading is disabled by default (as it should be). JavaScript in emails is not loaded or run.

Re: Why Some Security Experts Use Mutt

#43

I used to use Mutt, but these days I do over 75% of my mail reading on a phone, and on a phone Mutt is a non-starter.

I have used it from a phone with a terminal emulator over ssh (all of my phones have had keyboards). It was impressive to see how the keyboard supported mapping swipe gestures to cursor movement keys so that I could swipe up and down in my mutt message listings.

Re: Why Some Security Experts Use Mutt

#44

Earlier quoted context omitted.

Mutt and Exchange? Bliss! Would you happen to have a doc link handy?

IIRC Exchange does offer IMAP and SMTP...

Exchange has supported IMAP, MAPI, POP, and SMTP for at least a decade.

In large implementations (such as Exchange Online in Office365) they may not support some of those services. IMAP can be very resource intensive and bog down a CAS or storage server.

Re: Why Some Security Experts Use Mutt

#45
post #8

Another reason is that it spawns a text editor. Typing emails in a text widget without proper editing capabilities can be irritating.

In Firefox, you can use It's All Text! to edit the current text area in a proper editor. https://addons.mozilla.org/en-us/firefox/addon/its-all-text/

Pentadactyl also allows you to edit input fields with any editor (and many other things):

http://5digits.org/nightlies

Same goes for vimperator, of which Pentadactyl is a fork.

Re: Why Some Security Experts Use Mutt

#46
post #36

Earlier quoted context omitted.

Mutt and Exchange? Bliss! Would you happen to have a doc link handy?

Mutt doesn't support retrieving mail very well, but you can use sync programs (getmail, offlineimap, isync, exchange2mbox) to create local mailboxes and make mutt use the local mailbox directory instead. you can send email using external programs (local smtp server and openxchange for exchange). Mutt is not a traditional mail client, it is more of a glue between multiple programs so you can have one interface for all…

If Mutt is not a traditional mail client, then what is? heirloom-mailx?

I read my mail with less. That's a nontraditional mail client.

Re: Why Some Security Experts Use Mutt

#47
post #3
post #2

The title carries sarcasm as soon as you finish the article half-way. I totally agree that usability is damn important. One reason I stopped using Ubuntu Desktop version is exactly the poor usability of Unity, and I now prefer headless (and if I ever need browser I'd use X-windows). For email client I either use Thunderbird, or Outlook 2013, simply because graphical interface is easier to work with. I code using VIM…

It's pretty easy to install other desktop environments on Ubuntu. I run with xfce because I just need a taskbar to keep track of my terminal windows.

Have you tried a tiling wm? I use i3, it's great :-)

Re: Why Some Security Experts Use Mutt

#48

There are several slightly less hardcore alternatives to Mutt for those wanting a more modern e-mail experience without the security baggage of running an entire browser. Sylpheed for instance is a very pleasant text-only MUA ( http://sylpheed.sraoss.jp/en/ ). For added peace of mind it does not take long to write an AppArmor profile to further confine Sylpheed to just the parts of your filesystem you'd like it to be…

For added peace of mind it does not take long to write an AppArmor profile to further confine Sylpheed to just the parts of your filesystem you'd like it to be able to access.

Do you have an example? Sounds like a pretty awesome setup that you should share.

Re: Why Some Security Experts Use Mutt

#49

Thunderbird has, or had, a plain text mode and a "Simple HTML" mode (other than only recognizing a subset of HTML, I don't know what it does) for displaying messages. You can leave it in plain text mode and, in the event you really need to view HTML, switch it to "Simple" or full HTML. It also can block remote images and, I think, all JavaScript. The wonderful Nostalgy add-on provides a very responsive keyboard inter…

I use Thunderbird and keep it set as text only for sending and remote images loading is disabled by default (as it should be). JavaScript in emails is not loaded or run.

Thanks.

> I use Thunderbird and keep it set as text only for sending

Is that an option for viewing messages? That's where the security risk mostly exists.

Re: Why Some Security Experts Use Mutt

#50
post #23
post #13

I don't know any security experts who do this. I do know a bunch of old-school nerds who use mutt because that's what they got started with.

I don't think people use mutt because of security (other than good PGP support). I think people use mutt because they like the efficiency of a lean, terminal based, email client.

That plus there aren't many good open source (non-web) options.

Thunderbird is pretty bad.

Post reply on HN