Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Thunderbird 60.0 release

thunderbird.net

Post reply on HN
Print view View original

31–40 of 57 posts

Re: Thunderbird 60.0 release

#31

Post by reidrac »

b_b wrote: post #8

If you are on verions I was just in the same situation, and simply downloaded the installer from their main webpage [1] (after backing up my data in my profiles folder[2] and closing any running instances of Thunderbird), and it simply worked! I have to say, at least on Windows, the update looks much better, feels quite refreshing! Almost makes me want to actually check all the new emails :) [1] = https://www.thunder…

Any pointers on why is this that?

It says "currently only offered as direct download", does that mean that it'll be available as an update later on?

Re: Thunderbird 60.0 release

#32

Post by russdill »

b_b wrote: post #8

If you are on verions I was just in the same situation, and simply downloaded the installer from their main webpage [1] (after backing up my data in my profiles folder[2] and closing any running instances of Thunderbird), and it simply worked! I have to say, at least on Windows, the update looks much better, feels quite refreshing! Almost makes me want to actually check all the new emails :) [1] = https://www.thunder…

Also a bit curious on this, Debian and Ubuntu have been on 52 for a long time now.

Re: Thunderbird 60.0 release

#33

Post by nine_k »

RobertRoberts wrote: post #27

> Thunderbird version 60 is currently only offered as direct download from thunderbird.net and not as upgrade from Thunderbird version 52 or earlier. Anyone have any idea about this affects Linux? I am using Mint, and in the past the suggestion has always been "update through your repository" not with a download... Is it different this time for some reason?

I suppose distros haven't packaged it yet.

Re: Thunderbird 60.0 release

#34

Post by b_b »

russdill wrote: post #32
b_b wrote: post #8

If you are on verions I was just in the same situation, and simply downloaded the installer from their main webpage [1] (after backing up my data in my profiles folder[2] and closing any running instances of Thunderbird), and it simply worked! I have to say, at least on Windows, the update looks much better, feels quite refreshing! Almost makes me want to actually check all the new emails :) [1] = https://www.thunder…

Also a bit curious on this, Debian and Ubuntu have been on 52 for a long time now.

Yeah, unfortunately I don't have Linux (only WSL but I doubt that would really compare since I don't use the GUI environments avilable), so I don't know whether upgrading like this will be safe. I'd personally wait until they the repository developers bring it in, since there's no guarantee of what might happen.

Re: Thunderbird 60.0 release

#35

Post by RobertRoberts »

nine_k wrote: post #33
RobertRoberts wrote: post #27

> Thunderbird version 60 is currently only offered as direct download from thunderbird.net and not as upgrade from Thunderbird version 52 or earlier. Anyone have any idea about this affects Linux? I am using Mint, and in the past the suggestion has always been "update through your repository" not with a download... Is it different this time for some reason?

I suppose distros haven't packaged it yet.

Sure, that is par for the course... normally. But I've never been told. "Don't upgrade from version X to version Y" before, which is why I am asking if I need to do something different this time. (ie, not wait for distro update, because none will be coming...??)

Re: Thunderbird 60.0 release

#36

Post by 1wd »

reidrac wrote: post #31
b_b wrote: post #8

If you are on verions I was just in the same situation, and simply downloaded the installer from their main webpage [1] (after backing up my data in my profiles folder[2] and closing any running instances of Thunderbird), and it simply worked! I have to say, at least on Windows, the update looks much better, feels quite refreshing! Almost makes me want to actually check all the new emails :) [1] = https://www.thunder…

Any pointers on why is this that? It says "currently only offered as direct download", does that mean that it'll be available as an update later on?

https://mail.mozilla.org/pipermail/tb-planning/2018-May/0060... says "Manual updates of 60.0 will be the initial update mode, as we often do for a new release, because of the breadth of fixes and improvements. Manual-only updates (and updates via downloads) allows us to do a slow rollout to users, to get more user feedback than is possible during the beta period. Automatic updates will be enabled when we are satisfied that we have sufficient numbers of users and a sufficient level of quality - a process that typically takes some weeks."

Re: Thunderbird 60.0 release

#37

Post by zerocrates »

RobertRoberts wrote: post #35
nine_k wrote: post #33

Earlier quoted context omitted.

I suppose distros haven't packaged it yet.

Sure, that is par for the course... normally. But I've never been told. "Don't upgrade from version X to version Y" before, which is why I am asking if I need to do something different this time. (ie, not wait for distro update, because none will be coming...??)

I think it's just saying it won't come up in Thunderbird's own internal updater for now.

This shouldn't affect you if you've been installing/updating from a package manager.

Re: Thunderbird 60.0 release

#38

Post by starik36 »

I was hoping that Thunderbird would become a unified desktop equivalent of Mail/Calendar/ToDo of the apps we have on the mobile that can handle all the major providers (exchange, gmail, icloud, yahoo, pop, imap, etc...).

But it doesn't support a good chunk of these, which makes it difficult to adopt in my life.

Re: Thunderbird 60.0 release

#39

Post by ASalazarMX »

elorant wrote: post #10

Gee I'm still on version 11. I tried updating once, got a ton of useless crap like calendars and shit and reverted back. Email is one of the few things that I want something very basic and crude.

Seeing comments here of people who want mobile-like or web-like features in Thunderbird, I feel old school, but daaamn, 11? That's 6+ years of piled remote vulnerabilities. Clearly Thunderbird is not to your liking and you should try other clients.

Re: Thunderbird 60.0 release

#40

Post by Borealid »

jcranmer wrote: post #12
octosphere wrote: post #7

Earlier quoted context omitted.

Just so you know, an app password downgrades the security of your 2FA+Password pairing, and I never use app paswords because of that. If it was somehow possible to intercept the password used in the IMAP handshake, then that means access to your inbox without 2FA. This is why I am a huge fan of web-based clients and not things like Thunderbird.

IMAP authentication is done within SSL, so you'd have to start with an SSL MITM to be able to access the password login anyways. If you're scared about people having access to that, there are quite a few password authentication schemes baked into IMAP that don't leak your password over the network (SCRAM-SHA-256, anybody?). That said, all IMAP servers in practice implement only plaintext auth, or maybe NTLM and Kerbe…

Or a brute-force attack guesses your app password.

One of the major benefits of TOTP is that you have only a certain time window (usually, 30 seconds) to guess a password before the thing you're trying to guess changes and you have to start over.

With HOTP, you only get one guess before the goalposts move. The downside is that it's more vulnerable to DoS attacks when configured that way.

An app password has no brute-force resistance, so it lowers the security of your otherwise-2FA account overall.

Post reply on HN