Eudora

[RAO]

Hi

I am looking for something else than OE, and tried EUDORA, both 5.2 and 6.0

Ad-Aware signalled a Cydoor spyware in both.
Is this correct?. I thought Eudora was a 'good' program.

RAO

[Smker]

On Mon, 22 Sep 2003 16:37:31 +0200, "RAO" <rao@rao.rao> wrote:

>
>Ad-Aware signalled a Cydoor spyware in both.
>Is this correct?. I thought Eud

Eudora ships as a single install for paid or free. The free
contacts out for ads and such. I paid for it, and the ads don't show,
but it will still attempt to connect out on 80 and 8080. Not sure who
it's calling, and I don't care.

I only allow contact to my mailserver address on 25 or 110. It
still works fine. I have put the ADs folder
(Eudora\EudPriv\Ads\AdCache\) in "ignore" as it is regenerated by the
program even if you delete it. It always remains empty though.

[Bumblebee]

X-No-Archive: yes

On Mon, 22 Sep 2003 14:10:49 -0400,"Smker" posted ...


> I only allow contact to my mailserver address on 25 or 110. It
>still works fine. I have put the ADs folder
>(Eudora\EudPriv\Ads\AdCache\) in "ignore" as it is regenerated by the
>program even if you delete it. It always remains empty though.

There is a way of getting rid of the AdCache folder in Eudora paid mode.

With Eudora closed create a text file "AdCache.txt" in
Eudora\EudPriv\Ads\, then delete the AdCache folder, finally rename the
text file to AdCache without the .txt extension.
Eudora can't regenerate the AdCache folder any more.
--

Chris Bee

[sethra]

"RAO" <rao@rao.rao> wrote in news:YIDbb.24589$os2.342877@news2.e.nsc.no:

> Hi
>
> I am looking for something else than OE, and tried EUDORA, both 5.2
> and 6.0
>
> Ad-Aware signalled a Cydoor spyware in both.
> Is this correct?. I thought Eudora was a 'good' program.
>
> RAO
>
>

Eudora is spyware free. However, unless it is purchased and run in paid
mode, it is adware, and will connect to servers to download ads.

Even in paid mode, Eudora will also connect to a server to check for
updates. This can be turned off by adding this to your eudora.ini file in
the [Settings] section:
x-eudora-option:dontshowupdates=1

Adaware false positives Eudora because Cydoor also uses a folder called
adcache. Lavasoft has been notified of this but as yet haven't fixed
Adaware. You can tell Adaware to ignore the Eudora alert, or use the
methods outlined in other responses to your post.

This has all been discussed extensively in the Eudora newsgroup
comp.mail.eudora.ms-windows and the grc.com privacy and spyware groups. I
believe there is a mac Eudora newsgroup also. If your news provider's
retention is lousy, the threads should be available at the Google Groups
archive.

I've been a Eudora user for years, have been quite pleased with it, and
have verified, via firewall logs, that it never makes any sort of
connections other than the ones I allow.

It all comes down to personal preference, of course. If Eudora doesn't suit
your needs, you might try one of these, which I've seen recommended on the
net or used by friends:

Shareware:
PocoMail
The Bat
Kaufman Mail Warrior

Freeware:
FoxMail
Calypso
Pegasus Mail
Popcorn
Mahogany

Regardless, ditching OE is one of the best things you can do.

--
~sethra

[Smker]

On Tue, 23 Sep 2003 15:32:54 +1000, Bumblebee
<chris_bee@address.invalid.au> wrote:

>There is a way of getting rid of the AdCache folder in Eudora paid mode.
>
>With Eudora closed create a text file "AdCache.txt" in
>Eudora\EudPriv\Ads\, then delete the AdCache folder, finally rename the
>text file to AdCache without the .txt extension.
>Eudora can't regenerate the AdCache folder any more.

Thanks.

[Jay T. Blocksom]

On Mon, 22 Sep 2003 16:37:31 +0200, in <alt.privacy.spyware>, "RAO"
<rao@rao.rao> wrote:
>
> Hi
>
> I am looking for something else than OE, and tried EUDORA, both 5.2 and
> 6.0
>
> Ad-Aware signalled a Cydoor spyware in both.
> Is this correct?.
[snip]

Well, yes and no.

Versions of Eudora more recent than 4.2.2 *are* "spyware"; but they are not
"Cydoor spyware". I *thought* AdAware had fixed that misidentification a
long time ago -- what version of AAW are you using?

> I thought Eudora was a 'good' program.
>
[snip]

It used to be *very* good. In fact, I still use Eudora Pro v3.0.5 as my
primary mail client. But along about v4.0, the marketing department got
'hold of the reigns, and it became a rather bloated, buggy mess as they
tried to add *way* too many ill-conceived "features", instead of sticking to
and refining the core product that had worked well for years. They
partially corrected that in the subsequent updates, to the point that v4.2.2
is *reasonably* stable (tho' still not as stable as v3.0.5). Then at
v4.3.0, they adopted the "AdWare" model, which was really "spyware" in at
least some ways -- and a once-great title's devolution into a garden-variety
piece of worse-than-worthless crap was complete.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Jay T. Blocksom]

On Tue, 23 Sep 2003 07:00:39 GMT, in <alt.privacy.spyware>, sethra
<azoblue@myrealboxDOT.com> wrote:
>
[snip]
>
> Eudora is spyware free.
[snip]

Wrong.

<http://groups.google.com/groups?selm=ek0g4vcb9196c1pqu290pgnhiisvb2mtof%40n ews.rcn.com>

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[sethra]

Jay T. Blocksom <usenet01+SPAMBLOCK@appropriate-tech.net> wrote in
news:ckhbnv0c5u922ts2et4ngvth84do6g6o6h@news.rcn.c om:

> On Tue, 23 Sep 2003 07:00:39 GMT, in <alt.privacy.spyware>, sethra
><azoblue@myrealboxDOT.com> wrote:
> >
> [snip]
> >
> > Eudora is spyware free.
> [snip]
>
> Wrong.
>
><http://groups.google.com/groups?selm...pgnhiisvb2mtof
>%40news.rcn.com>
>

Thanks for reiterating exactly what I stated in my post, disregarding your
misunderstanding of the terms "spyware," "adware," and "paid mode."

If you had actually read my post, you would see that I called Eudora
"adware" unless run in paid mode. *Anyone* running *any* form of adware
does at their own risk.

Furthermore, I also stated that unless you tell it not to, Eudora will
check for updates even if run in paid mode, and gave instructions on how to
turn off automatic checking.

Running in paid mode, with automatic update checking turned off, Eudora
makes ZERO non-user initiated internet connections.

This is easily verified with a firewall.

Install firewall. Install Eudora. Register Eudora. Turn off automatic
update checking. Restrict the Eudora firewall rules to ports 25 and 110 to
the IP of your mailserver (note: this kills html mail also, but being a
privacy/security conscious internet user, you don't use html mail or the
Microsoft viewer, right?).

Check your firewall logs to see if Eudora tries to connect anywhere else.
Nary a peep in 5+ years, and multiple versions.

--
~sethra

[Jay T. Blocksom]

On Sun, 28 Sep 2003 01:34:15 GMT, in <alt.privacy.spyware>, sethra
<azoblue@myrealboxDOT.com> wrote:
>
> Jay T. Blocksom <usenet01+SPAMBLOCK@appropriate-tech.net> wrote in
> news:ckhbnv0c5u922ts2et4ngvth84do6g6o6h@news.rcn.c om:
>
> > On Tue, 23 Sep 2003 07:00:39 GMT, in <alt.privacy.spyware>, sethra
> ><azoblue@myrealboxDOT.com> wrote:
> > >
> > [snip]
> > >
> > > Eudora is spyware free.
> > [snip]
> >
> > Wrong.
> >
> ><http://groups.google.com/groups?selm...pgnhiisvb2mtof
> >%40news.rcn.com>
> >
>
> Thanks for reiterating exactly what I stated in my post,
[snip]

I did no such thing.

> ... disregarding your
> misunderstanding of the terms "spyware," "adware," and "paid mode."
>
[snip]

I also do NOT "misunderstand" those terms (tho' apparently, you do -- or,
you're just very deeply in denial).

What part of "the Registration Code is 'phoned home" did you not grasp?

What part of "the 'phone home' mechanism ... remains active in Paid and ...
Light ... modes; so therfore, it by definition has NOTHING to do
with 'ad serving' or 'ad-response tracking'" did you not grasp?

What part of the fact that these behaviors have been confirmed by Qualcomm
personnel did you not grasp?

> If you had actually read my post, you would see that I called Eudora
> "adware" unless run in paid mode.
[snip]

I did read your post. Then as now, your notation that Eudora is (as of
v4.3.0 only, which you failed to mention) "adware", while a true statement,
is irrelevant.

> *Anyone* running *any* form of adware
> does at their own risk.
>
[snip]

Wrong.

"Adware", per se, is not necessarily evil. Spyware is. The fact that much
"adware" is *also* "spyware" does not change that.

> Furthermore, I also stated that unless you tell it not to, Eudora will
> check for updates even if run in paid mode, and gave instructions on how
> to turn off automatic checking.
>
[snip]

Also not relevant.

> Running in paid mode, with automatic update checking turned off, Eudora
> makes ZERO non-user initiated internet connections.
>

Try again. There is *NO* legitimate reason to "'phone home" the GUID in
order to check for an update -- yet John Purlia (who wrote the fscking
code!) already admitted that it does exactly that, even in "Paid" mode.

> This is easily verified with a firewall.
>
> Install firewall. Install Eudora. Register Eudora. Turn off automatic
> update checking. Restrict the Eudora firewall rules to ports 25 and 110
> to the IP of your mailserver
[snip]

Ahhh... So you're obviously referring to a so-called "software firewall",
running on the same WinBox as Eudora. Clue #1: That's not a firewall. Clue
#2: Given the actual situation, you you would be a fool to trust whatever it
may report.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[sethra]

Jay T. Blocksom <usenet01+SPAMBLOCK@appropriate-tech.net> wrote in
news:n8d6ovsiqam5ffpcjtq86s9012o06dar38@news.rcn.c om:

[Jay's histrionics snipped]

Yes, I realize just because you're paranoid doesn't mean they're not out to
get you.

Regardless, that in no way negates the fact that everything I've said
regarding Eudora is easily verifiable. Furthermore, arguing with those who
are either so insecure or misinformed they have to resort to ad hominems is
neither productive nor educational, so carry on if you wish, I'm not going
to waste any more of my time.

Cheers,
--
~sethra