Reply to thread

Message

<blockquote data-quote="upnorth" data-source="post: 993208" data-attributes="member: 38832">[URL unfurl=&quot;true&quot;]https://www.ghacks.net/2021/08/13/thunderbird-91-is-available-as-a-manual-upgrade/[/URL]Not too hard to find, but PDF.js ( same viewer that&#039;s used by default in Firefox ) was integrated in Thunderbird version 91 released August 2021, and wow that&#039;s a pretty busy bee of developers on Github. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite134" alt=":coffee:" title="Coffee&nbsp; &nbsp; :coffee:" loading="lazy" data-shortname=":coffee:" />Simply keeping Thunderbird updated, I have a hard time see where this actually could be dangerous enough and extra since I personal as a malware hunter very rarely stumbles over actual alive and still kicking in the wild genuine malicious pdf samples. The majority of those are phishing attacks. Phishing links normally have a very short time span where they are still active. Even a CVE search gives very little info:[URL unfurl=&quot;true&quot;]https://www.cvedetails.com/product/106287/Pdf.js-Viewer-Project-Pdf.js-Viewer.html?vendor_id=25996[/URL]but click around too much anywhere on pdf files, is bound to ask for trouble no matter what OS, browser, software etc as it&#039;s delusional at best claim something is 100% bulletproof/secure.</blockquote>

[QUOTE="upnorth, post: 993208, member: 38832"] [URL unfurl="true"]https://www.ghacks.net/2021/08/13/thunderbird-91-is-available-as-a-manual-upgrade/[/URL] Not too hard to find, but PDF.js ( same viewer that's used by default in Firefox ) was integrated in Thunderbird version 91 released August 2021, and wow that's a pretty busy bee of developers on Github. (y):coffee: Simply keeping Thunderbird updated, I have a hard time see where this actually could be dangerous enough and extra since I personal as a malware hunter very rarely stumbles over actual alive and still kicking in the wild genuine malicious pdf samples. The majority of those are phishing attacks. Phishing links normally have a very short time span where they are still active. Even a CVE search gives very little info: [URL unfurl="true"]https://www.cvedetails.com/product/106287/Pdf.js-Viewer-Project-Pdf.js-Viewer.html?vendor_id=25996[/URL] but click around too much anywhere on pdf files, is bound to ask for trouble no matter what OS, browser, software etc as it's delusional at best claim something is 100% bulletproof/secure. [/QUOTE]

Verification