"George Coulouris" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Richard Head wrote:
> > "George Coulouris" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >
> >>Richard Head wrote:
> >>
> >>>"George Coulouris" <[EMAIL PROTECTED]> wrote in message
> >>>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >>>
> >>>
> >>>>Chris Lee wrote:
> >>>>
> >>>>
> >>>>>It would be nice to be able to select a folder of mail or a few mails
> >>>>>and right click and 'collect addresses to address book' This pops up
a
> >>>>>dialogue with a drop down of available address books and a text entry
> >>>>>area for a new one. This way addresses can be collected manualy and
> >>>>>sorted into appropriate books.
> >>>>>
> >>>>>
> >>>>>
> >>>>It would be nice if we learned from Outlook's mistake and turned
address
> >>>>collection off by default.
> >>>>
> >>>>
> >>>I find it useful to have it turned on.
> >>>Which mistake?
> >>>
> >>In my opinion, having such collection enabled by default is a security
> >>risk that enables the propagation of SirCam and friends. Though I
> >>suppose Mozilla is more sane in that it doesn't enable javascript for
> >>mail and news by default.
> >>
> >
> > would you prefer not to maintain any sort of address list?
> >
> >
>
> One of the first things I do when configuring mozilla (or outlook
> express, for that matter) is to disable address collection. I'm not
> saying that the feature isn't useful or that it should be removed, I'm
> just of the opinion that software should ship with conservative default
> settings with respect to security. This is of particular concern to
> mozilla, since its codebase runs on so many platforms. At least SirCam
> only buggers windows boxes; a future hole in mozilla could affect lots
> of architectures.
but the weakness is a virus accessing the address list not how the
addresses get their.
