I wonder how I can be surprised to learn that #Mozilla's #Thunderbird collect telemetry infos (including your mail domain) and share them with partners such as #Amazon.

It's obvious they spy on your mails! 🤦‍♂️

Indeed, in case of crash, they even send to "their" #AWS servers a memory dump that contains sensitive data crash reports.

This likely include, your emails in clear, your private encryption keys¹ and everything else the program has loaded and kept in memory.

What does this means for an hypothetical attacker that can access such reports?

I mean... like a #USA agency arguing that you might be a terrorist or something.

Oh but sure... they shall do no evil...

https://www.mozilla.org/en-US/privacy/thunderbird/

#Privacy #Freedom #hypocrisy #Security #infosec
_____

1) Since version 68, Thunderbird does not use the #GPG suite via #Enigmail, but directly do encryption "to avoid licensing issues" 🤷‍♂️

@rysiek@mastodon.technology @mala