Slashdot Mirror


Mitch Kapor's Outlook-Killer

Kent Brewster writes "In the San Jose Mercury this morning: 'For more than a year, [Mitch] Kapor and his small team have been working on what they're calling an open-source "Interpersonal Information Manager." The software is being designed to securely handle personal e-mail, calendars, contacts and other such data in new ways, and to make it simple to collaborate and share information with others without having to run powerful, expensive server computers.'" Kapor explains his intent in his own words.

86 of 323 comments (clear)

  1. Was it just me.. by irc.goatse.cx+troll · · Score: 5, Funny

    Or did anyone else read the headline and think there was yet another outlook vulnerability?

    --
    Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
  2. Evolution.... by colin_n · · Score: 5, Funny

    Why not build on the success of evolution?

    --

    --------- I have no signature
    1. Re:Evolution.... by CvD · · Score: 5, Insightful

      +1 Insightful... why reinvent the wheel when there's Ximian Evolution, which already has a whole load of these features and an actual working product. I know it happens all the time in the open source world, but that doesn't take away my right to bitch about it. :-)

    2. Re:Evolution.... by illusion_2K · · Score: 5, Interesting

      Being an evolution user (and former Outlooker) myself, I was curious to see what he plans on doing. But from what I see on his features page I only noticed a couple features that interested me. (Naturally YMMV)

      Mail:

      • auto-archiving of old mail
      Information Sharing & Exchange
      • integrated Instant Messaging and presence management (Jabber)
      • remote peer-to-peer browsing of others' data
      • flexible security model to control access
      • file and document sharing
      • remote queries, e.g., look up address in another person's contact list
      • automatic updating of information from remote sources: receive new contacts, changes to existing contacts automatically (publish-subscribe)
      Access
      • home and work PC's with complete automatic replication of data

      Evolution seems to have all the other features already in place (although some may only be accessible via the Exchange connector). I'm sure they would be able to add the others without too much difficulty.

      Apologies for the total cut & paste job.

    3. Re:Evolution.... by colin_n · · Score: 4, Funny

      Why is that considered funny? I wasnt trying to be funny. Was it funny to people?

      --

      --------- I have no signature
    4. Re:Evolution.... by SerpentMage · · Score: 5, Informative

      If you read his weblog he wants it to work on all platforms.

      "Have I mentioned it's going to run on Macintosh, Linux, and Windows and will not require a server"

      Evolution is not exactly intended to be run on a Windows Box or a Mac...

      --

      "You can't make a race horse of a pig"
      "No," said Samuel, "but you can make very fast pig"
    5. Re:Evolution.... by PotPieMan · · Score: 5, Informative

      Really?

      It may not run in Aqua, but Evolution does run on Mac OS X.

    6. Re:Evolution.... by Sivar · · Score: 5, Funny

      Build on the success of Evolution.

      Think about it. ;-)

      --
      Computer Science is no more about computers than astronomy is about telescopes. --E. W. Dijkstra
    7. Re:Evolution.... by arnoroefs2000 · · Score: 5, Informative

      Apparently this is why:

      "Recent open source groupware products and projects (Evolution, Kroupware) use Outlook as the baseline for design and functionality, an approach which benefits users by being familiar, but doesn't take design risks which could have big pay-offs for users in power and simplicity. We're trying to re-think the PIM in fundamental ways and expect to be judged in terms of our success in achieving that goal. We're building the product on using up-to-date architectural components (peer-to-peer networking, integrated instant messaging, an RDF-compatible semantic database) and are not saddled with legacy code. At the same time, we will be fully compliant with a variety of open standards, such as iCal, vCard and the Jabber protocol."

    8. Re:Evolution.... by colfer · · Score: 5, Informative
      support.ximian.com
      Question
      The new Macintosh operating system OS X is based on a UNIX kernel. Why don't you port Evolution to Mac OS X?


      Answer
      A real OS X port of Evolution would require a substantial amount of work, because true OS X applications are tied to the graphical interface layers of the OS ("Quartz" and "Aqua,") via the Apple APIs ("Carbon" or "Cocoa").

      Evolution will compile and run on Mac OS X if you have an X server and the GNU developer's toolchain installed. This has been done and is reported to work quite well. However, Ximian cannot offer support for this configuration at this time.
    9. Re:Evolution.... by egreB · · Score: 3, Interesting

      Well, Outlook does exist for Mac (OS X AFAIK, maybe others as well). It's just called something else. Entourage is actually quite good, and doesn't contain as much security holes as Outlook on Windows does. But still, it's too complicated and [feature|bug]-filled to get as useful as it could.

      Even though, I'm all for a free (as in speech) alternative. I especially like the server-free solution they're laying out, although I'm curios about how that will be implemented. I really hope someone will take the initiative to hack some syncing with palm-devices into this thing as well. I Outlook-syncronisation is one of the main features that still attracts users to Outlook..

    10. Re:Evolution.... by Qrlx · · Score: 5, Insightful

      ALL platforms?

      There's no mention that it will run on PDAs. In fact it sounds like it's not intended to. I think it should. If it's a really lightweight app, it should run on a PocketPC.

      (Yeah, Microsoft, dont' feed the trolls, blah blah blah. Stay with me folks.)

      The very last line of The Article says "In the era of the WEB, are PC applications obsolete?" I think, for an "outlook killer" the answer has to be yes. Not having a handheld version of a LIGHTWEIGHT, MULTI-PLATFORM PIM seems to completely miss the point of that whole "market space." Leveraging that portability onto the PDA-space would enhance this product's Outlook-killability.

      You can get PDAs with 400 MHz processors and 64MB RAM nowadays, with WiFi those things are capable of playing in realtime. Why ignore that?

    11. Re:Evolution.... by rsborg · · Score: 4, Informative
      If it's a really lightweight app, it should run on a PocketPC.

      Typical slashbot that didn't read the article, eh?

      It uses P2P, with a no-server, freenet style data distribution model... think that's lightweight???
      Well, even if the binary was small enough to fit on an ARM based proc, you would still have problems with the amount of bandwidth and always-on connectivity that P2P implies.

      Now if they managed to make some soft of satellite *mobile* program that attaches to your always-on desktop/laptop app, that would rule... but then again, that would be a different approach, and so far, this project is still vapor.

      --
      Make sure everyone's vote counts: Verified Voting
    12. Re:Evolution.... by Tokerat · · Score: 3, Funny

      Build on the success of Evolution.
      Does that meean this software will come into common use and become the de-facto standard everywhere except America's Bible-belt?

      --
      CAn'T CompreHend SARcaSm?
    13. Re:Evolution.... by Tokerat · · Score: 3, Informative
      ...although I'm curios about how that will be implemented.
      Rendezvous?
      --
      CAn'T CompreHend SARcaSm?
    14. Re:Evolution.... by dbrutus · · Score: 3, Informative

      Entourage, Outlook Express, and Outlook all exist on the Mac platform. What's really weird is that Outlook (the Exchange client) is not made by the Mac BU but is made by the Exchange client group. It's a horrid little client but it gets the job done.

    15. Re:Evolution.... by MythosTraecer · · Score: 4, Informative

      Exactly. Rather than clone Outlook, or try to make a more usable version of it, Kapor et al. want to create a new, completely different PIM, one that fits people's needs in a way Outlook does not. They believe there's a market for a PIM like that, and I'm in agreement with them. However, I'm dubious of the prospect that the long-dead Agenda is the correct prototype for such a revolutionary new information manager. On the other hand, calling "revolutionary" a program that does things differently than Outlook shows just how far Microsoft has eaten all innovation from the market.

      --

      --Mythos
    16. Re:Evolution.... by kubrick · · Score: 5, Funny

      Yes, but the great advantage of the 'Creation' program is that it will only take six days to write! On the seventh day the author will rest.

      Evolution, on the other hand, is taking aeons :).

      --
      deus does not exist but if he does
    17. Re:Evolution.... by dbrutus · · Score: 3, Informative

      Log out of your computer's outlook, go to somebody else's machine and log in to exchange. Do you see your calendar, tasks, and notes? Well, that's Exchange, not Outlook. Yes, Outlook keeps a local copy and you can even run a bastardized version without Exchange but the real power of Outlook is as the Exchange front end and I suspect that that's the real developer perspective. Did the Outlook program ever exist without a server?

    18. Re:Evolution.... by Tokerat · · Score: 5, Interesting

      No, really, take your own advice.

      Without a server, clients need to simply discover each other. Rendezvous will allow then to do this, clean and without user intervention (i.e. no typing in someone's computer name or IP). The protocol of transer will be TCP/IP, however I believe you're refering to the structure of the datagram, i.e. what goes into each packet that is sent, which is entirely up to the designers.

      I don't think Rendezvous is overrated at all. I think it's the way things should have been done 10 years ago, and it's almost sad that it wasn't.

      --
      CAn'T CompreHend SARcaSm?
    19. Re:Evolution.... by H310iSe · · Score: 3, Insightful

      I think the point was that it would run without exchange - that's the killer part of most small-business email systems, the expense (outright and TCO) of exchange. And try to find commercially hosted exchange servers to use. Don't exist.

      I'm all for anything that does an end-run around exchange.

      --
      closed minded is as closed minded does
    20. Re:Evolution.... by Tokerat · · Score: 3, Interesting

      Except that it's open and free for use, encouraged on all platforms.

      NetBIOS is pretty much limited to Windows, and it's kludgy on other OSes. Plus it's proprietary and somewhat unreliable.

      --
      CAn'T CompreHend SARcaSm?
  3. I send you these files to ask you advice by schlach · · Score: 5, Funny

    Kinda disappointed... For a second there, I thought it was another email worm that uninstalled Outlook on its way out...

    =)

  4. sorry by Karamchand · · Score: 5, Insightful

    But as long as I do not see at least some screenshots it is just vaporware for me.
    Perhaps this is a bit exaggerated but I've simply experienced too many disappointments with software which does not exist yet.

    Anyway, still I wish good luck to this project! :-)

    1. Re:sorry by Psiren · · Score: 5, Funny

      Perhaps this is a bit exaggerated but I've simply experienced too many disappointments with software which does not exist yet.

      Yeah, I've always had problems trying to get non-existant software to compile. Even when I do it never seems to run.

    2. Re:sorry by Entropy_ah · · Score: 5, Funny

      Yeah, I've always had problems trying to get non-existant software to compile. Even when I do it never seems to run.

      you should probably upgrade to gcc3.2

      --
      my other penis is a vagina
    3. Re:sorry by sydb · · Score: 3, Funny
      kermit:~# cc /dev/null
      /dev/null: file not recognized: File truncated
      collect2: ld returned 1 exit status
      kermit:~#
      Yeah, you're right. Vapourware.
      --
      Yours Sincerely, Michael.
    4. Re:sorry by JabberWokky · · Score: 5, Funny
      Compiling /dev/random will work, it just takes lots of tries. (And you'd probably want to make sure that ^D forces the end of file rather than trying for the end of that stream).

      --
      Evan

      --
      "$30 for the One True Ring. $10 each additional ring!" -- JRR "Bob" Tolkien
    5. Re:sorry by thefogger · · Score: 3, Funny

      You know, if you compile the output of a million /dev/random's with a million compilers for an unlimited amount of time, you'll eventually end up with a working linux kernel ...:-)

      --


      Um... I didn't do it!
    6. Re:sorry by evilad · · Score: 3, Funny

      But you wouldn't have to groff nearly that many of them to get a complete set of man pages for the unix command set.

    7. Re:sorry by maw · · Score: 5, Funny
      it is just vaporware for me

      Hmm, I think you mean Kaporware.

      --
      You're a suburbanite.
  5. Re:I've been looking.... by colin_n · · Score: 3, Insightful

    It would be possible to make mozilla act as described, wouldnt it?
    The mail functionality is there and the calendar is getting there, although it is very basic right now.

    --

    --------- I have no signature
  6. good idea by solendril · · Score: 5, Insightful

    Good thing. I despise outlook. I work at a tech support department at a medium sized college, and we officially support netscape (not much of a better choice) but outlook attracts email worms like a neon light attracts bugs. After the hundreth box that I had to zero or get our net engineer to block I'd love to see something more secure. I'm using Eudora right now.

    Also, I'd love to see popular email programs support background encryption, something that happened behind the scenes without the users notice, so even the most inept id10t could handle it. It's ridiculous that 90% of the world is sending it's email around in cleartext. Are we just begging the FBI or the NSA to read our minds?

    1. Re:good idea by Anonvmous+Coward · · Score: 5, Insightful

      Don't confuse Outlook Express for Outlook 2000. OE is the worm attractor. OL2K, though somewhat vulnerable, is nowhere near as problematic as OE. It's kind of surprising considering how much more OL2K does.

      OL2K is more than an email prog, it's got a lot of cool things going for it. You've got the calendar, the todo list, the sticky notes, and contact list. This may not seem all that interesting until you synch up with an device such as a PDA.

      I have an Ericsson T-68. It has an IR port (and bluetooth) and synchs up with my laptop. My laptop is running OL2K and has my contact list on it complete with phone numbers and email addresses. If I update a contact with a new phone # in Outlook, then it appears on my cell phone. In other words, if I buy a new cell phone, I don't lose all my phone #'s. Pretty cool considering I didn't have to buy a $120 cable to link the two.

      The todo list has been a surprisingly useful feature on my phone as well. I do not carry my PocketPC around. My laptop's not on all the time. So what happens when I need a reminder? Well, I enter something to do in Outlook, the phone grabs it and will alert me. This may not be interesting to all of you, but it is to me. Nearly forgot my gf's birthday is on Tuesday and I need to go buy her present today!

      Anyway, this isn't a 'Run out and get Outlook!' post, it's a "here's why people use it" post so that it's clearer why something like what is mentioned in this article is so interesting. MS basically has no competition in this area because nobody else seems to understand the value of it. The only app I can think of that could have given OL2K a run for it's money is the Palm Pilot desktop. It had similar features, though I don't remember it having mail. (note: I'm not saying it wasn't a mail client, I'm saying I don't remember it having one.)

      Until OL2K has competition, it is really hard to replace Office. Until Office is replaced, Windows cannot be replaced. (in a bidness setting...) As a matter of fact, that's why I'm not using Star Office right now. I'm too dependent on OL2K's org features. Might as well install the rest of Office while I'm there.

    2. Re:good idea by Monkelectric · · Score: 5, Informative
      I'd love to see something more secure. I'm using Eudora right now

      Eudora is full of spyware my friend. I switched from eudora to evolution for that reason.

      --

      Religion is a gateway psychosis. -- Dave Foley

    3. Re:good idea by Jahf · · Score: 5, Informative
      Qualcomm's response to the accusation of spyware in Eudora:

      http://www.eudora.com/techsupport/kb/2220hq.html

      I've been using Eudora for years, including 5.1, and I can't recall any other times Eudora was accused of being spyware, so unless their response is false, it's not "full of spyware".

      I do keep meaning to switch to a fully Linux-based client, but email seems to be one of the big issues for me. I have tried Evolution, KMail and at least 4 others but never quite find it as usable. I spend probably 50% of my work time answering email.

      Of course, this whole thread is off-topic.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    4. Re:good idea by Anonvmous+Coward · · Score: 5, Informative

      Actually, he's right. The last time I tried this was OL98, so don't flame broil me if it's not true with 2k. I uninstalled Outlook Express once and it did remove a DLL that OL98 needed. The problem is, I have no clue what that DLL did. For all I know, that DLL was just the 'Preview Pane' bit.

      Does this mean that O2k or 98 is vulnerable because of OE? No. (Actually there is ONE vulnerability that's OE's fault, I'll explain that in a bit...)

      O2K has similar features to OE, but the default security settings are better. It makes better decisions about what kind of scritps can be run and what type of attachements can be called. If you want my opinion, I suspect that the reason OE's security settings are further behind is to give O2K a 'more secure!' rating on the marketing brochures. I cannot substantiate that of course, but it does amaze me.

      There is one O2k vulnerability involve IE that really frosts me. If you save a message as a file in O2k, then the extension is '.MSG'. If you save a message in OE as a file, the extension is '.EML'. Can you see the problem with the two different extensions? You can have O2k installed, but if you double click a message saved in OE format, then ... BING it opens Outlook Express. (And all the annoyances that come with it..)

      I have friends who think they need to forward every chain letter that goes around, and a good chunk of them use OE to do it. So they are forwarding a .EML file around (as an attachment) that will fire up OE no matter what email prog is your primary one. Result? They could be sending me an infected mail and I might be dumb enough (or non-attentive) to open it.

      I have a piece of advice for ALL of you that are using Windows: Reroute the .EML extension to Notepad. I don't care if you're running Netscape mail or even Hotmail, you do NOT want OE getting run. Otherwise, yes, you could get bitten by an Outlook virus even if you're not running it.

      With that said, I feel pretty confident with O2K. My company's run Outlook since it first came out and we've only had one virus actually get through and cause any problems. The damage caused was not a result of a flaw in Outlook, but rather a flaw in the person who decided to open the mail.

      Interestingly enough, that virus picked exactly the right believable message for the user to open it, so I don't entirely blame him. We used to have an employee with contacts in the gov't. He got a message one day that said "Take a look at these FBI pics..." Heh. Of all the 40 or so random messages that email picked to display, that was the one that would have pretty much guaranteed it'd be opened. Given the context of things going on around that time, it would have been akin to recieving a message like "Check out these pictures of my baby" recieved from somebody who had given birth a week earlier.

      Your mileage may vary, but you'll understand why I will stick with 2k and not bother with XP or future versions of Outlook until a.) I have a better choice or b.) Microsoft pulls out its compatibility crowbar and demands I upgrade.

    5. Re:good idea by Anonvmous+Coward · · Score: 4, Interesting

      "You're crazy if you think OL2K works well..."

      I'm the guy who owns the mailserver and I have to support 20 or so people with Outlook related problems. I may be crazy, but it's well documented that I have an abundance of time to spend on Slashdot.

      So there are a few possibilities here:

      -I'm more competant than the guy you have maintaining the mail system.

      -You're spreading FUD.

      - You're uninformed about what the problem really is.

      - You're using OL2k in an unsual or custom way.

      - You're supporting a great deal more people than I am.

      Now, listen carefully: I am not claiming that OL2k doesn't have defects. If it doesn't support SSL well, then I cannot defend that. We aren't using that here. We're not using an Exchange erver. (I've heard that's a fair source of a number of problems.)

      I can tell you that the rules do work fine, but they have a few drawbacks:

      1.) They ignore HTML. So if somebody sends you a mail that says 'Hamdingers' but it's bracketed with HTML tags, it won't get picked up of a rule says "delete all messages that say 'Hamdingers'.

      2.) The rules wizard only sort of works in IMAP. Since the body of the message isn't downloaded through IMAP until you open it, the Rules Wizard cannot respond to any message that has a rule that applies to that section of the message.

      3.) Attachments disappearing sounds more like a server problem than an Outlook problem. Lots of attachements flie around here all the time and we haven't had a case of disappearing attachments.

      So take your pick. At the very least, I hope my notes on the Rules Wizard is useful to somebody. MS does a terrible job of telling you what the Wizard's limitations are.

      To be fair, though: I've tried a number of rules on various clients and OL2k by far has the most sophisticated and useful. One of these days I'm going to learn VBA so I can write even fancier rules.

      Note to mail developers: Anything you can do to enable scripting or programming on an email client will be a big win, expecially when fighting SPAM.

    6. Re:good idea by delta407 · · Score: 5, Interesting
      OL2K is more than an email prog, it's got a lot of cool things going for it. You've got the calendar, the todo list, the sticky notes, and contact list. This may not seem all that interesting until you synch up with an device such as a PDA.
      Or, until you hook it up to an Exchange server in a company with a few hundred employees. Most corporations that use Outlook do so not for the e-mail capability, but rather the groupware capability -- scheduling appointments collectively, meeting requests, delegatation, etc. As it stands, there are few products that can match Outlook's rather full feature set.

      Outlook is actually a decent program with far fewer vulnerabilities than Outlook Express. Also, since a corporate deployment of Outlook is in a controlled environment, server-side antivirus solutions are possible and make a whole lot of sense. Properly set up, Outlook can be a good solution to an office communication problem.

      (Of course, I still hate Exchange, but the users don't seem to mind...)
    7. Re:good idea by florin · · Score: 3, Insightful

      Don't confuse Outlook Express for Outlook 2000. OE is the worm attractor. OL2K, though somewhat vulnerable, is nowhere near as problematic as OE. It's kind of surprising considering how much more OL2K does.

      Sorry, but this is just not right. Outlook (9x or 200x) is at least as vulnerable as Outlook Express, and probably more so. More often than not the MIME header, buffer overflow or Windows scripting host exploits that affect OE work just as well in Outlook too. And then it's also susceptible to malicious VBA code.

      That said, Outlook isn't all bad. For one thing, few people actually have to pay for it, because MS likes to throw it at you as a package deal every chance they get (like say when you buy Microsoft's word processor & spreadsheet, or client licenses for your MS mail server, or a Pocket PC). It's also pretty easy to use - witness the abundance of Windows software that rips off its interface these days, like Evolution does as well.

      One annoying thing is that it used to be possible to share information among Outlooks in smaller workgroups without having to go all the way to an Exchange server, using a concept called Net Folders. It was a bit quirky but inexpensive, unlike Exchange. And unlike Bynari InsightServer, which is currently the only way to sort of emulate an Exchange Server on a Linux platform.

      More than a new (type of) client, what I'd really love to see is a free open source Exchange Server type program that would be usable with both Outlook and Evolution. Make Exchange unnecessary and let everyone use the client they're used to/like/got for free from MS.

    8. Re:good idea by Anonvmous+Coward · · Score: 3, Informative

      "I am listening, but I have my own argument against storing it on the SIM card: first, if you lose your cell phone, you lose the SIM card. Second, why be dependent on some card when you could synchronize it with your computer and reliably back it up?"

      I'm storing it in Outlook, then synching the phone up to it. My previous cell phone did not have a sim card. So I needed a solution to the 'How do I maintain my numbers?' problem. The only way I had back then was to buy an expensive cable to hook the two since it did not have an IRDA port.

      Now, as for the SIM card, you are absolutely correct that it's a safer way to store your numbers. However, the main reason I got interested in backing up my numbers in the first place is that my first cell phone was stolen. The sim card would have done me no good then. Today, though, if my cell phone were lost or stolen my laptop'd have a good backup of my numbers. Plus, I synch up with my PocketPC as well, so my contacts are retained on it. So today, if I lose my phone or my laptop, I still have a backup. :)

    9. Re:good idea by Anonvmous+Coward · · Score: 3, Insightful
      "I'm sorry, but this seems like a Microsoft sales person's post."

      err okay. I'm going to politely share something with yout: It is a pet peeve of mine to be accused of being an MS salesperson just because I see the positive sides of one of their products. I use OL2k at work because I choose to. I wish I was an MS salesman because then it'd be worth arguing with people about it. But I'm not. If you want any definitive proof of that, look at this part of my post:

      Until OL2K has competition, it is really hard to replace Office. Until Office is replaced, Windows cannot be replaced. (in a bidness setting...) As a matter of fact, that's why I'm not using Star Office right now. I'm too dependent on OL2K's org features. Might as well install the rest of Office while I'm there.


      Do you really think that an MS salesperson or evangelist would point out exactly what is needed to produce a competing product to OL2K?

      As for the rest of your post, the arguments you make are that the features are 'not new'. I never claimed that MS invented/created/envisioned/or even innovated. What they did do was put it all together in one useful product.

      "So, this is a "run out and get outlook" post that is written as if none of us heard of these things before Outlook."

      I find that comment amusing. Most people here are either Linux users or stay as far away from anything made by MS as possible. At the same time, I do see comments along the lines of "Replace Outlook with some other mail client", which says to me "Maybe they don't understand what it is that makes OL2k useful." To put it another way: how could you see a good chunk of the /. community being aware of some of O2k's non-mail features?

      In any case, no, I am not an MS salesman or even an evangelist. The point of my post was to explain why the article isn't talking about the development of 'yet another mail client', but rather an app that covers personal organization. I was trying to clarify what this program has to go up against.
    10. Re:good idea by florin · · Score: 5, Informative

      Umm, nope, I would challenge that point. VBS and other scripting stuff is turned off by default. I've never heard of a buffer overflow exploit in OL, but if you have an example somewhere I'd love to read about it. (in other words, I'm not claiming it doesn't exist.)

      Well, take for instance the vcard Buffer Overflow vulnerability that was unique to Outlook 2000.

      The long GMT date field bug bug caused a buffer overflow which allowed running arbitrary code in all versions of Outlook, as well as in some versions of Outlook Express.

      Seeing as Outlook uses Internet Explorer to display HTML content, just like Outlook Express does, it inherits IE's flaws as well, as was demonstrated in the Buffer Overrun in HTML Directive flaw.

      As for VB scripting being turned off by default now, that may be the case with Outlook XP (2002) or 2000 with all security patches applied, but I can assure that wasn't the case back in 2001 when the Anna Kournikova Worm and other similar exploits scourged through the Outlook community.

    11. Re:good idea by florin · · Score: 3, Informative

      WARNING: FUD ALERT!!

      I use Outlook 2002 (XP) (which has the same security as 2000 + SP1) and absolutely nothing is allowed to execute.


      Until the next flaw is found, of course. Mind you that the post I was responding to was talking about Outlook 2000.

      I got the Klez virus sent to me. Just for yuks, I opened the message, carefully watching and using McAfee to trap anything in case Outlook let it slip through. Nothing. Nada. Zip.

      And this proves what?

      I think you're making up the buffer overflow stuff (can I see a link, please?)

      Sure, just click a few posts up.

  7. Chandler by T-Kir · · Score: 4, Funny

    Code-named ``Chandler''

    At least it wasn't named after the same character from 'Friends'...

    People might have worried that the software would take after the character... get a bit bloated and be a bit sarcastic. :)

    --
    Are you local? There's nothing for you here!
  8. More Useful URL by frenchs · · Score: 5, Informative

    I wasn't too impressed by his description and explination, so I found the page that had the real details, enjoy: http://www.osafoundation.org/our_product_desc.htm

  9. Nah, the *real* Outlook-Killer by schlach · · Score: 5, Funny

    ... is Exchange =)

  10. Why not start with Mozilla's framework? by pcx · · Score: 5, Insightful

    Mozilla is already open source why do these guys need to re-invent the wheel when they could take the mail and news client already exists and expand on it to make it infinately more useable?

    I mean isn't that the whole point of open source, not having to re-invent everything but to expand and improve on what's already out there?

    Maybe I'm missing something.

  11. Cool apps by LinuxGeek · · Score: 5, Interesting

    Linux ( FreeBSD, etc...) already has many small single purpose cool apps, but not many large ( mozilla scale) cool apps. Agenda spawned a whole wave of business users to the DOS world and could do the same for Linux.

    From the feature list, this takes care of 80% of the needs that keep business people using windows just to have Outlook calender functions. Agenda was replaced by Symphony and Symphony wasn't the simple freeform database/calendar app that Agenda had been.

    Agenda was allowing complex datamining from freeform databases before the term 'datamining' existed. If this is going to be an extension of Agenda, then much coolness is ahead and many people will be interested in trying Linux just to run the new Agenda.

    --

    Kindness is the language which the deaf can hear and the blind can see. - Mark Twain
    1. Re:Cool apps by Anonymous Coward · · Score: 3, Interesting

      I ran Agenda as my PIM for about 7 years.

      Speaking as a fully qualified geek, Agenda is an amazing piece of software and the team was thinking totally out of the box. It's not useful to think of it in Outlook terms; it's another beast entirely.

      Poke around with google and you can find out much more about Agenda. Two references to chase down: 1) Agenda: A Personal Information Manager, CACM, Jul 1990, Vol 33, No. 7 (Kaplan, Kapor, others),

      2) There's also a patent (5,115,504)on some of its core ideas, so that should be some good slashdot flamebait. The patent describes Agenda's internal data structures and algorithms. I have no idea how this patent influences the Kapor's current work. Presumably IBM owns the IP from its Lotus purchase.

      Agenda was a complete failure in the market. It wasn't like any word processor or spreadsheet or database program, and the market gave it a collective, "huh?" No doubt Kapor knows all this and wants to take Agenda's intelligent inferencing database and make it useful in an email/calendar/browser/P2P setting.

      It's a good thing.

  12. more outlook features by Jafa · · Score: 5, Insightful

    If they're not careful, they very well could mimic outlook even moreso. Under Feature Summary:

    -user-scripting capabilities

    This might not end well...

    I guess they can't screw things up worse than Outlook though.

  13. They are using some of Mozilla by Jafa · · Score: 5, Informative

    Under http://www.osafoundation.org/technology.htm, they mention the parts of Mozilla they're planning on using. Mainly just the Gecko engine and the development tools. From the looks of things, they'll be using Jabber quite a bit, maybe that model doesn't fit as well directly to Mozillas PIM features.

    Jason

  14. Ummmm by IamTheRealMike · · Score: 5, Interesting
    I don't mean to diss their work, but considering they've spent a year "designing the architecture", where are the docs explaining exactly how it's going to work?

    So far the only info on the site are a rundown of the technologies they've "evaluated". However, they talk about using Jabber as a P2P transport - but Jabber is server based. I've not seen any demos of a p2p version of jabber either. Have they actually thought this through?

  15. [OT] Re:good idea by benedict · · Score: 4, Insightful

    It's not necessarily sensible to encrypt non-
    sensitive material. There's a performance cost,
    a risk of future unreadability, there's the key-
    distribution problem, and of course the difficulty
    of making everyone's implementation compatible.

    There are good reasons to encrypt everything, too,
    I'm just saying it's not black and white.

    --
    Ben "You have your mind on computers, it seems."
    1. Re:[OT] Re:good idea by dbrutus · · Score: 3, Insightful

      As a rule of thumb anything that I wouldn't be comfortable shipping out snail mail using a postcard should really be encrypted in an e-mail context. That SOP makes the vast majority of mail encrypted.

      Btw: what kind of processor are you running that it doesn't have enough cycles to burn to encrypt/decrypt mail?

  16. Re:Mitch Kapor's Outlook-Killer? by Sivar · · Score: 3, Insightful

    No. It said, "Outlook KILLER," not "Outlook Express clone." :)

    --
    Computer Science is no more about computers than astronomy is about telescopes. --E. W. Dijkstra
  17. Vapor but still a good idea by Jahf · · Score: 4, Interesting

    I've seen a number of responses asking why doesn't Mitch and his group put their efforts into (Evolution||Mozilla||etc).

    I may be in the minority, but I hate the Mozilla mail client. It just doesn't work for me.

    I refuse to use Evolution ... if I wanted to use Outlook, I'd install Outlook. I don't like the interface of Outlook and Evolution seems to be a rehash of the same.

    In fact, right now I use Palm Desktop for my PIM (even though my PDA has been without batteries for 9+ months due to inactivity) and Eudora for my email. I would love the -functionality- of Outlook including reliable synchronization with integration with a good email client.

    If I had that, I would switch to Linux as my primary work machine (currently I experiment with several distributions and my off-hours machine is Linux, but my work desktop still runs Windows).

    My point is, why should they contribute to projects they don't like? It's their time and it sounds like they have adopted project directions that many of us have been wanting for a long time ... that is to be -better- than what Microsoft has currently locked most work desktops onto rather than just replicating those interfaces and functionality on a different OS.

    --
    It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
  18. Cross platform UIs by maunleon · · Score: 5, Insightful

    Now I'm not familiar with wxWindows/wxPython, but the problem I see is that by writing using a cross-platform library, you can't take advantage of OS-specific features. You are stuck with the generic widgets that appear to work the same way accross platforms. For example, on windows, you cannot take advantage of COM functionality unless you isolate the code and make it windows-only. Yes python supports COM, but that code will crap out on linux...

    Example: one of the worst interfaces I've seen is Ethereal. Excellent program, very useful, but the interface bites.

  19. Python by rbeattie · · Score: 5, Interesting

    No one has mentioned it yet - I'm amazed it wasn't in the headline. The project is going to be written mostly in Python.

    Pretty neat. I've been meaning to swap some books in Safari and check out the Learning Python... I guess I finally have some reason.

    This whole project sounds great - but why is there no code available? Supposedly a small group of core developers have been holed up for a year designing this thing... so where's the code already? Man, I can announce an Outlook Killer and throw some html up on the web too. But then again, I'm not Mitch Kapor...

    -Russ

    --
    Me
    1. Re:Python by The+Pim · · Score: 5, Funny
      The project is going to be written mostly in Python....

      I've been meaning to swap some books in Safari and check out the Learning Python... I guess I finally have some reason....

      but why is there no code available?

      When you learn Python, you'll find that it's high-level, dynamic nature allow you to accomplish a great deal in only a few lines of code. So no code in Python probably contains more functionality than no code in C.

      You'll also find that whitespace is an important part of Python syntax. So look closer--that "no code" could contain a lot of significant whitespace.

      --

      The evaluation of an action as 'practical' . . . depends on what it is that one wishes to practice.
  20. They need a copy editor to edit their copy by steveha · · Score: 5, Funny

    now overwhelmingly dominated by Microsoft's inelegant but overwhelmingly dominant Outlook

    This surprisingly clumsy phrase was clumsy but surprising to me.

    steveha

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
  21. Frontpage news by MadFarmAnimalz · · Score: 3, Insightful

    OK, now I know that I don't have to write a single line of code to get my project spalshed across the front page. Good. Now, what was it I was going to write...

    (head scratching)

    Oh yea. I remember. Hey, Taco, I'm going to invent a perpetual motion machine the day after tomorrow. For real. Not vaporware. Honest! I demand my story submitted. :-)

    --
    Blearf. Blearf, I say.
    1. Re:Frontpage news by m0nkyman · · Score: 5, Informative

      Only if you are Mitch Kapor. Perhaps you are unfamiliar with him. Founder of Lotus, Co Founder of the EFF, basically, somebody who typically Gets Things Done®.

      --
      ~ a low user id is no indication I have a clue what I'm talking about.
  22. are we seeing the birth of the P2P PIM? by mattbland · · Score: 3, Insightful

    If the software is going to work without a server I expect it's going to need to share information between clients somehow, so my best guess is that it's going to use P2P technology to do this in conjunction with the Jabber stuff for messaging. But without a central server for replication this is going to mean that data will get out of sync if it has to be cached on other users machines, or otherwise a user will need to keep their machine on all the time they want to share their information such as calendars, etc.

    Inter-operaterability with other systems would most likely be ignored whilst prefering to encourage transistion and migration from one system to another. That way they'll be able to get you to move your data over and use it right away, but not talk with the Exchange server requiring an Evolution like connector (which is not open or free).

    I wish them luck. I can remember sitting in a bar discussing the pros and cons of coming up with a competing product to Exchange and Outlook around about a week before the first time I saw Evolution mentioned, which was on Slashdot.

    I hope that they can pursuade the Mozilla people to allow people to use it if it's that much better.

    --
    /usr/bin/awake/too/long
  23. No server? by styxlord · · Score: 3, Insightful

    A bit optimistic. Better hope that the organizer of events never loses a hard drive or leaves their notebook at home. All the technology and specs already exist to make an Outlook/Exchange killer. vCard, iCal, iTIP are all good protocols for PDI and can be used via e-mail and HTTP (defined in iMIP). The best part (and Apple realized this by picking vCard and iCal for their OSX PIM software) is that Outlook already supports auto importing of vCard and iCal data (no if they would auto-export it then life would be great).

  24. Q. Protocol? by simetra · · Score: 4, Interesting

    Is there a standard PIM messaging format to interchange appointments, contacts, etc., between various apps?

    --

    "Would it kill you to put down the toilet seat?" -- Maya Angelou
    1. Re:Q. Protocol? by Meowing · · Score: 4, Informative
      Is there a standard PIM messaging format to interchange appointments, contacts, etc., between various apps?
      Yep. Here.
    2. Re:Q. Protocol? by bruthasj · · Score: 4, Informative

      It's called V.Calendar. Use google.

    3. Re:Q. Protocol? by kellan1 · · Score: 3, Informative

      It was vCalendar, not V.Calendar. And in its current incarnation its called iCalendar. If you're going to be snide, get the information correct. iCalendar is the bedrock spec, for a whole suite of scheduling specs built on top of it, check out Calsch Working Group for more info.

  25. Potentially dangerous features by dstone · · Score: 5, Insightful

    Among the features the email client will have are "in-line viewing of attachments" and "user-scripting capabilities". (!)
    In order to displace Outlook, I suppose people will demand these features. But let's hope the OSA Foundation does a better job on securing these features than MS!

  26. Groove Networks, Mitch Kapor & MS$ by Anonymous Coward · · Score: 3, Informative

    I hope I shall not spoil any party!!!

    1. Mr. Kapor is on Groove Networks board of directors, isn't there any conflict of interests...
    2. IMHO the OSAF target features are quite similar to Groove's...never mind the spesific technology used...
    3. MS had invsted $51 million in Groove, and to my best recall parts of Groove were integrated into Outlook (or at least there was intention for such integration)

    One may only wonder if:
    a)Mr. Kapor is looking for a silver bullet against Gate's embrace & extend strategy? as well for Groove financial status?

    To make a long story short, why not open & port Groove Networks source code? would it not be simpler? Groove shall still be the best party to package it as well tailoring new business components...

  27. worse still Re:Serverless browsing .. by einhverfr · · Score: 5, Insightful

    Try this on a network of any size. 2 computers means 2 computers (1 for each), three means 4, 4 means 12, and so on-- the number of possible connections gets out of hand rapidly. If you have 100 peers, you have 9900 possible connections on your networks, with 99 computers that might need to be searched at a given time!

    This is why we have servers (LDAP, email, etc.) but they don't have to be expensive... P2P doesn't scape THAT well for the corporate workstation, and instead, people tend to rely on networks of servers and networks of workstations instead.

    So although this might be nice for the small office, I have serious questions about its scalability.

    --

    LedgerSMB: Open source Accounting/ERP
    1. Re:worse still Re:Serverless browsing .. by natmsincome.com · · Score: 3, Interesting

      For years now people have been arguing over what is betterP2P, Client server, or thin client.

      And while your comment is correct for a Simple basic P2P network it's not true for an Advanced P2P network.

      With an advanced P2P network you have advanced topologies, pre-emptive retival, caching, Super Nodes, Node Proxies, etc.

      The problem is that advanced P2P products are still under development (same with clustering which is similar to P2P on a lower level - single box vs lots of little boxes) whereas client server and thin client products have been out for a long time and lots of people understand them.

      The problem with P2P is that it is more complicated.

      Taking you example but using the minimum number of connections instead of the maximum number as you did. In this instance it looks either like a single line OR a star or multiple stars connected together(this is still a P2P network although far from optimal).
      2 Computers = 1 conection.
      3 Computers = 2 connections.
      100 Computers = 99 connections.

      Now email is P2P already and was always designed to be P2P as it the Internet. Now if your talking about scaling can you imagine the specs you'd need for a single server or a single cluster of servers!

      I don't suffer from instanity!
      I enjoy every moment of it!

  28. Re:almost by Anonymous Coward · · Score: 3, Insightful

    what we need isn't a mail client that "LOOKS" like outlook but one that functions like outlook. Something for *nix desktop/workstation that can interact and use exchange server. That would be something else... not another look a like.

  29. Re:I've been looking.... by cscx · · Score: 5, Insightful

    It would be possible to make mozilla act as described, wouldnt it?

    No. Not even close. Not trolling here, just talking reality, my friend.

    Think Ximian Evolution -- but that's such a verbatim copycat of Outlook that I'm very surprised that they haven't been sued yet.

  30. Go look at ecco first. by Malcontent · · Score: 5, Interesting

    If you are thinking of "rethinking the pim" go look at an old version ecco pro. That was one awsome pim that got buried for no reason.

    --

    War is necrophilia.

  31. excess verbiage error by MegaFur · · Score: 4, Funny

    Note to reader: this is not a flame! I'm just joking around. It's funny, laugh.

    From the article:

    A couple of months ago, it became clear that we could not do all of the above while at the same time fully realizing all of the new ideas we've developed about helping people manage information better. This gave rise to an important idea, which is that we see this project as needing to go through multiple major releases to grow up and become fully realized. We felt it was important to start with something which could over time gain wide adoption, because then there would be a larger potential base of interest for future developments. All of which is to say we're going to wind up deferring working on certain cool features in order to get an initial product out the door.

    At this point, a small team has spent the better part of a year thinking through the problem space and developing the fundamental of our approach and has just begun writing the production code. We've made a number of fundamental decisions about the architecture and have arrived at a preliminary set of features. Andy Hertzfeld has built a terrific prototype which enabled us to explore lots of new ideas.

    A couple of paragraphs ago, it became clear that I could not take all of Mitch Kapor's claims seriously while at the same time fully realizing my internal goals of being honest to myself and others. This gave rise to an important idea, which is that (maybe) Mitch has been in marketing far too long. I felt it was important to continue reading so that I could be fully informed. All of which is to say that I have to keep reading while Mitch drones on and on about "product" and "deferring work" and more "product".

    At this point, a small team has spent the better part of a year thinking through the problem space and developing a theory to explain wtf Mitch's problem is. (Their answer? Five tons of flax! (see ddate(1) or your peneal gland for more info)) I've made a number of fundamental decisions about the quality of the weblog I've just read and have arrived at a (not preliminary) set of conclusions:

    1. Mitch Kapor has been fatally infected by market droids and suits.
    2. I have too much time on my hands.
    3. You have too much time on your hands. (You (might have) read the article, then you read the blockquote of my post (so you read (part of) the article again), then you read all the way down to here.)
    4. I use too many parentheticals. (But it's so much fun, dangit!)

    The part that really got me was the first line of the second quoted paragraph. Yes, I understand what he means by "thinking through the problem space", but I can't ignore that he actually phrased it that way. Guys, the only time a programmer should talk of "problem space" is when she or he is writing code that handles one. E.g. an expert system that has to search its database to find the "best" answer to the user's querry or a (chess-like) games program that has to search the tree of valid moves to find a good one or a root finding program that has to search in the x-y plane (or the x-y-z space or n-dimensional space) for the set of points where f(x[1],x[2],...,x[n])=0.

    Now go talk amongst yourselves while I "think through the problem space" of how to quit being a slashdot bum and go get a job. :-P (I know, I know. The answer is obvious...)

    --
    Furry cows moo and decompress.
  32. Don't re-invent the Wheel by Stoptional · · Score: 3, Insightful

    If I hear that sure-fire, badge of stupidity, quoted one more time I may just roll over, die AND throw up on my shoes. Not in that order of course.

    Wheels get re-invented ALL the time. It's called PROGRESS. What? You didn't realize that progress was cumulative? That everyone stands "on the shoulders of giants"? Every post, it seems, that says ANYTHING, someone drags it out "What's the point? We've done that with x?"

    Bozo. You folks are supposed to be thinkers. So think.

    No Wheel, no rubber tyre - no rubber tyre, no tractor - no tracter, no avocado farm - no avocado farm, no Guacamole for the masses!

    And then where would we be? Mmmmm?

    Okay, so I'm a _little_ off topic but at least I have my chips and dip.

    --
    Stoptional
  33. Definition of outlook killer by SuperKendall · · Score: 3, Insightful

    Reads and updates my calendar from the outlook server.

    That is the only requirement. Anything that does not do this is be defininition not an outlook killer, in that I will still be forced to use outlook at work. Something I can just drop in frees a whole box from runnign Windows.

    I have thought of using Evolution with the connector, but haven't taken a look at it yet.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  34. Re:I've been looking.... by _Sprocket_ · · Score: 5, Informative


    Think Ximian Evolution -- but that's such a verbatim copycat of Outlook that I'm very surprised that they haven't been sued yet.


    Yes and no. Screenshots would make it seem like an Outlook clone. And Evolution does mimic some of Outlook's functionality. But they're actually quite different.

    So what's the same? Layout is simular. Mail, calandering, tasks (todo), contacts. Summary. And that's about it.

    Outlook has memos and a journal. It has a more advanced flagging system. And numerous other tidbits and features I'm probably completely unaware of. It also has better integration. For example, you can create an appointment with an email note in the appointment's notes by dragging an email to the Calendar. No such functionality in Evolution.

    But Evolution has its own features. Its searches are better. I prefer the way it threads messages. And its vfolders have proven to be rather amazing once I started to understand their use. Evolution also has nice touches such as quick access to email source and headers. And it is rather sane when handling potentially abusive HTML email (ie: by default, it won't load images from remote sources until told to).

    Yea. Evolution and Outlook look simular. And they're bound to compete in one way or another. But they're hardly identical.
  35. Re:almost by Syre · · Score: 4, Informative

    There was and is a unix-based server that works like Exchange. It can use Outlook as a client, and can also use Java-based and Web-based clients, as well as other Unix mail clients.

    HP developed it and used to sell it as Openmail, but they don't sell it any more.

    Now it's been picked up by Samsung. Here's the FAQ.

  36. Read slashdot from the groupware client!!!! by Nicolay77 · · Score: 3, Funny

    "having every feature a user wants"

    That of course means that /. will have their comments in an email format.

    Imagine the anxiety just waiting for that pop-up window saying: "Your message has been replied" or "You've been moderated insighful".

    And believe that some of us are /. addicts... just wait to see this stuff working !!!

    --
    We are Turing O-Machines. The Oracle is out there.
  37. Re:I've been looking.... by cscx · · Score: 3, Interesting

    Two things that caught my eye were the Office-like shortcut toolbar on the left side, and the calendar page, which copies every single mundane detail from Outlook's interface, especially the date-book stacking (i.e., squishing more than one day's view on the screen). Even the positioning of the Calendar and Tasks list.

    But then again, Evolution is meant to be an alternative to Outlook, with the least user training required to transition.

    But like I said, I'm surprised that they haven't been sued yet. Maybe cause it's freeware.

  38. Re:I've been looking.... by _Sprocket_ · · Score: 4, Informative

    Can you sue for "look and feel"? I thought that became a lost cause early on with legal battles between Microsoft vs Apple, and Lotus?

    Outlook's main interface may be becoming commoditized (assuming this layout is an Outlook first). Other PIM implementations, like the default Palm calendar, allow multi-day views simular to Outlook. I seem to remember a third-party Palm app that squished ToDo items in that view too.

    It may very well be that there is nothing for Microsoft to do. I would imagine they would put their considerable legal resources to work if they thought they had a case. Freeware or not.

  39. Outlook features to avoid by billstewart · · Score: 3, Informative
    I use Outlook at work. It's vastly improved from MSMail on Win3.1, which was the third-worst mail system I'd ever seen.* It's mostly usable now, except when things go wrong, but there are some behaviours to avoid.
    • Keeping the mail in one huge monolithic binary undocumented-format file is a really bad idea.
    • Encrypting the mail file can be a good idea, but only if you use a credible encryption algorithm instead of some "compressible encryption" snake oil, and use it in a way that doesn't prevent somebody who has the password from recovering broken mailfiles.
    • Close interaction between the mail system and the network is a bad idea - Outlook has gotten less cranky about starting it up when you're not connected to a network, or connected to the Internet but not your WINS server, but it still doesn't adapt well when you turn the network on and off or change your IP address by moving your laptop or start a VPN. By contrast, Eudora just works - when you tell if to send or receive mail, it opens a network connection and works, but you can start the system without the network.
    • Having the user interface stall when you're receiving big mail messages is bad - if you want to look at something in your mailbox but somebody in marketing sent you a 5 MB Powerpoint that's trickling in over modem, it'll be a while before you can find out the phone number on that calendar entry you wished you could open.
    • Starting up the whole mail system just to get at your calendar or address book is a mistake, especially if starting the mail system is closely tied in to the network status. That means if you're trying to look up a calendar entry or phone number, it can be really slow (see previous two complaints); much better to be able to look it up directly.
    • Incrementally showing search results is nice, or at least showing results from local data while you're waiting for that LDAP server to respond.
    • Having separate local and network-based spam filter tables is fine if you can use both - it's really annoying if you can't add a spammer to the table without discarding the system table.
    • Undocumented files and file formats are bad bad bad...


    -------------
    * IBM PROFS was the worst. The original Prodigy 300-baud 24x40-character mail system was heinous also. The homebrew Kermit-based system we used that crashed when receiving more than 200KB of mail was about on par with MSMail in those days...

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  40. Netbeui by sheldon · · Score: 3, Informative

    You are confusing NetBIOS with NetBEUI.

    If you run NetBIOS over TCP/IP, you start introducing the computer browsing services which acts as a cache for locating machines. This helps to reduce the amount of broadcast packets flying around, and makes NetBIOS slightly more scalable. Then you have WINS and all that sort of stuff which solves most of the other issues, if you want to go to an NT domain model.