Someone hacked my gmail

... or in any other way got access to it and sent (non critical) spam from it.

So first and foremost, if you got an unsolicited email from my gmail account this night, I do apologize. It probably only contains a link to a non existent document. If you can see any data / route / ip / trace in the email that could help me identify the source, kindly reply to me via this email.

I was under the impression that a) my google password is quite strong, and b) that I'm very selective with app or site I allow access to my gmail account.

The weird thing is the list of recipients they picked. It's a strange combination from people I've sent email to in the past, and people I follow on g+ (but did not send an email to).
They all exist in my gmail address book, and the only common denominator I found  so far is, that none of them have a phone number in the address book entry... apart from that I have to draw a blank.

I also found the original email (not only the non-delivery replies) in my sent folder, so I looks like the email has really been sent through my gmail account (and not only with my email in from/reply-to).

Of course in the meantime I not only changed my gmail password, I also reviewed the web-apps and services that have access to my gmail, and will go through the apps on my iPad and Android phone.

Again, sorry... If you have any data to help, just pass it on.

Thunderbird left alone

So it appears that the Mozilla Foundation decided to no longer support, i.e. fund, Thunderbird.

There will be only security updates and patches, and the community is of course free to continue developing Thunderbird.

I guess email - and thus Thunderbird - is not innovative enough for Mozilla, and in a way I can see that. but then again, I've been using Thunderbird even as my corporate email client for about 10 years now and never regretted it. Or even envied the Outlook users. Quite on the contrary.

At least since Lightning, the Calendar add-one, got mature. For a global search (indexed, of course) I find Thunderbird even superior. Ctrl-K is (after Ctrl-Shift-K and Ctrl-M) probably the most used short cut for me in Thunderbird.

Well, let's hope the community continues to support it - I'd hate to go back to Outlook.

Awesome Thunderbird Plugin

So, the other day I sat down to write myself an add-on that was more than overdue for me... or for the way I use mail and Thunderbird.

At that time I called it Domain Specific Move, and it did exactly that. I took the most domain with the most occurrence in an email (scanning to, from, cc) and suggested a folder for this mail; and you were able to train it.

Through Max's comment I learned about the Nostalgy add-on. It actually is about defining keyboard shortcuts and stuff for Thunderbird:

Adds keyboard shortcuts to change folder, move/copy messages, with folder name auto-completion (using only the keyboard). 

The folder name auto-completion is the really awesome stuff. I just have to hit S (for Save == Move) and an entry field pops up at the bottom of the window and I only need to type two or three letters of the folder name and that's it.

When you really use nested folders like I do - with about 5-6 levels deep, this saves a lot of time.

Same for G as GoTo folder. And there's a nice B (whatever that stands for) that Moves the message to the folder and then goes to the folder (sort of S+G).

Great stuff. Thanks Max, for the hint.

Thunderbird hack: Domain Specific Move

One of the most frequent actions in Thunderbird is to move a message that I received from a business partner or customer to a message folder for exactly this partner/customer. Same for messages I sent to them.

However, as you communicate with more customers and partners, the folder hierarchy will become more complex and I already need about 6 clicks to select the specific folder.

Sometimes I'm lucky and it is the most recently used folder, then I can do it with the "move again" function directly in the context menu; sometimes, it is at least in the recent folder menu, still 3 clicks.

WIBNI if TB could just remember that I always move messages from domain A to the folder X, lets say from "ibm.com" to folder "/Vendors/IBM" or something like that, and then present me with a one-click option on the menu.

So I wrote an add-on for this and called it "Domain Specific Move".
It does exactly what I described.

I find the most frequently used domain in the email (counting all from sender, recipient, cc-list).
If I already find a setting for this, I create an additional menu item in the move message menu for a move to this folder.

If not, I present a "learn" menu item, that lets you train the extension on where to put mails for this extension (i.e. register a folder for this domain). You pick the destination folder yourself. No magic included there.

Once I thus learned and stored the folder for this domain, I can - next time this domain appears - present the "Move to " menu item as above.

Configuration is stored in the preferences under "extensions.domainmove.".
Currently I have no options page for this, so if you want to change or remove an entry, you have to go to the prefs.js file or the about: dialog.

Yes, I know, filters can do the same; but when I select to manually run the filter, it will not tell me what exactly it is up to... The beauty of my approach (IMHO) is, that I see it on the menu and can decide otherwise, because not always does the folder registered for this domain really match.

In essence this is only a short cut with an educated suggestion. No behind-the-scenes magic.

Todos:

• more flexibility with domains with more than 2 parts (e.g. at.ibm.com should map to ibm.com if there is no at.ibm.com)
• unlearn domains (without going to the about: dialog)
• option for domains-to-ignore; currently I ignore non-specific domains as gmail.com, a1.net, gmx.at, sun.com, oracle.com [1].
• ignore "my" domain (see comment re oracle.com)

Available for TB3+ only.

I will polish the code and implement some of the above todos, then I will post the first beta.

--
[1] well for me as an former Sun and now Oracle employee, all emails contain either an oracle.com or sun.com address and this domain contains no information on where to archive the email.

ProfiMail for the E71

Thanks to the hint of a colleague, I installed ProfiMail for the E71. Well, I needed the hint, because I never intended to install yet another 3rd party app on my E71...first of all, because this never increases the stability of the phone, and secondly, I thought it would only be cumbersome...

I couldn't have been more wrong.

ProfiMail (v3, 3.28 to be more specific) has everything you want from a professional mobile email client.

• full imap/imaps support.
• "push" email... well, it's "only" IMAP IDLE but thats good enough for me[1]
• multiple accounts
• full folder support on IMAP, and it allows you to move an email message from folder to folder.
• user interface is very OK
• proper attachment support
• proper address book support

Seems like the creators actually use it themselves or have a good feedback process... it's the little things like the feature to check mail on startup and immediately go to the inbox when you start the email client...

Access to it is quite easy, if you map the application to the long-press of the Messaging one-touch-key, then it's just one (long) press on the envelope button, and there you go.

I seem to prefer it over the built-in iPod/iPhone mail client... but that's probably only because of the physical keyboard... which I stll prefer over the virtual touch keyboard.

--
[1] and it's enabled on my mail server...

Odd limits on the E71

In the last couple of months the limitations on my Nokia E71 started to really annoy me.
Today's incident:

When I added my new corporate email account[1] (and did not delete the old one) I wanted to enable Automatic email retrieval[2] - of course.
To my great surprise, I could not...

Turns out, you can only have 2 email accounts with automatic retrieval enabled.
A limitation I don't understand at all.


Totally time for a new handset... preferably one with proper reception... :-)
--
[1] new because Oracle bought Sun and as of today I am 100% Oracle
[2] you know, the one that cannot be set to 1 hour...

Facebook: Half-hearted email replies

For a couple of weeks now, Facebook allows you to reply to a notification (e.g. when someone comments on your status) via email.

Xxx Xxxxxx commented on your status:

"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras neque diam, tincidunt sit amet faucibus quis, tincidunt eu mauris. Nulla vitae est ipsum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. "

New Feature: Reply to this email to comment on this status.

To see the comment thread, follow the link below:
http://www.facebook.com/xxxxxxxxxxxxxxx

Thanks,
The Facebook Team

So just hit reply on this e-mail and type away your response.

A really nice feature, since most of the time I read the comment first via email, not on Facebook itself - no matter if mobile, iPod or Web. So being able to reply right from my mail-client is really convenient.

However, the one notification one cannot reply to via email, is a notification from a facebook message itself. If someone sends you a message on facebook, you have to log on to facebook and reply their.
Odd.
Half-hearted.
Please...

No more email SMS notifications

So, after 8 years or so I finally switched off the SMS (=aka text) notifications from my private email account to my mobile, since 95% of those notifications are pure spam.
I sick and tired of being told by sms that my penis is to short...

Delete nor Not Delete

I noticed a strange co-incidence between Lightning (the Calendar plugin for Mozilla Thunderbird) and the crappy mail client of my Nokia 6233...

Both cannot delete the item you are currently viewing.
Strange.

In Lightning (and I guess in Sunbird as well), when you open an event (or todo item) you cannot delete this very item from the menu or toolbar.

There is simply no delete function.
Only in the various calendar views, but not on the item itself.
This annoys me, because here is exactly the place where you see and know most about the potential delete candidate... what better place to delete it ?
(btw: I already filed bug #392021 against it, but it does not move... maby I'll grab it myself one day)

Same in the email client on my Nokia 6233:Not that anything really works there... The 6233 does something I dubbed "POP over IMAP", since it uses IMAP as a technical protocol layer but only offers POP like features.

There also, I cannot delete the mail I'm currently viewing. I have to go back to the inbox and delete it from there. Crappy.

Mozilla Foundation to spin off Thunderbird ?

A recent post by Mozilla CEO Mitchell Baker (mitchell's blog: Email Call to Action) call for a something like a vote on what Mozilla should be doing with Thunderbird:

"Mozilla has been supporting Thunderbird as a product since the beginning of the Foundation. The result is a good, solid product that provides an open alternative for desktop mail. However, the Thunderbird effort is dwarfed by the enormous energy and community focused on the web, Firefox and the ecosystem around it. As a result, Mozilla doesn't focus on Thunderbird as much as we do browsing and Firefox and we don't expect this to change in the foreseeable future. We are convinced that our current focus - delivering the web, mostly through browsing and related services - is the correct priority. At the same time, the Thunderbird team is extremely dedicated and competent, and we all want to see them do as much as possible with Thunderbird.

We have concluded that we should find a new, separate organizational setting for Thunderbird; one that allows the Thunderbird community to determine its own destiny."

And she gives 3 options:
Option 1. Create a new non-profit organization analogous to the Mozilla Foundation [...]
Option 2. Create a new subsidiary of the Mozilla Foundation for Thunderbird [...]
Option 3. Thunderbird is released as a community project much like SeaMonkey [...]
(find the details at the original blog post).

Interestingly none of them reads "keep it as it is"... so this looks like they are abandoning their child... I'd hate that. Been a long time Netscape/ Mozilla-Mail / Thunderbird user. Especially now with the progress they made with TB 2.0. And now that SunBird / Lightning is finally (though still slowly) becoming a decent calender.
Forking TB into its on entity would probably weaken Firefox as well (gut feeling, can't really say why, but I think so).

Maybe Option 2 is the one to go to keep Thunderbird and Firefox really close.

Fighting Spam

One of my mail providers with quite some heavy Spam problems recently implemented a new anti-spam technique, which actually reduced my daily Spam from about 100 to 5-10 e-mails a day. The ISP side Spam filters conveniently caught 99% of them, with not too many false positives (“false positives” are regular e-mails that erroneously are treated a spam), so the 100 really did not bother me that much. Now the 5-10 are really fine. For various reasons I wont disclose the feature they implemented, but it seems to work well so far.

Which leads me to the still unsolved problem of Spam; Spam or UBE (“unsolicited bulk email”) could only evolve because there is no cost associated with sending or transporting email. Spammers therefore can send out as many messages as they want, with the most dubious messages, because if even only 1 in ten thousand users clicks on their link or offer, it would still be worth it.

So the more general model here is, that the spammer has a means of transporting a trigger message to his supposed audience that leads at least a tiny fraction of the audience to do something that causes the spammer to receive money; e.g. place an order with him, usually for sex related drugs or fake luxury stuff, or it might be even ad sponsored web pages.

According to this, spam works if the gain (financially for the spammer) from one user performing this action times the success rate (i.e. the fraction of users who fall for this of all the messages sent) is higher then the cost of delivering the spam messages. As long as email is free, this will obviously always work. Even if we make it significantly hard for spammers to break our spam filters, with huge numbers it pays.

As a formula:

cost-per-message*messages + setup-cost + cost-of-counter-fighting-antispam
< gain-per-click * success-rate*messages

Some parties therefore suggested to collect a very tiny amount of money, say 1cent, for each email. Regular users like you and me wouldn't really notice, because with even 100 e-mail a day its only 1€or 1$. Spammers would notice, because at several thousand to million messages it would make them pay more than the receive.

I have my doubts regarding this model:

1. Morally: 1 cent per message seems little to us Europe or US, but is a significant barrier to everyone else, e.g. Africa; we don't want to truncate them from the net.

2. A problem of collection: who should collect the fee ? the ISP cant and won't, because that would be event based billing, which most of the smaller ISP simple aren't setup to do.

3. even if the ISPs were to charge for it, there would emerge at least one ISP who would break the system for a very small email flat rate, and it would pay again for spammers

4. if the receiving party collects, then from whom ?

5. the spam model is only about the relative price of the message to the gain (see above), Spam SMS (“short messaging service” on the mobile) shows that it works with high cost delivery (and SMS is probably the most expensive today) if only the gain is high enough; with SMS spam it is usually a call to a toll-number (1-900 in the US, 0190 in Germany, 09xx in Austria)

So as neat as charging for e-mail messages seems, because it would attack the very model of spamming, I doubt that it can work at all (or should work at all given the cost for the 3^rd world).

Technorati Tags:spam, e-mail