9 ms·
Outlook 2016’s New POP3 Bug Deletes Your Emails
- chris_wot 11y agoIt's POP3. Seriously, one of the easiest to understand mailbox protocols ever. HOW could Microsoft stuff up something like this so badly? Look, I know that mistakes can be made. But in this case, I just can't think of a single excuse that would be satisfactory.
- kbenson 11y agoWell, it has nothing to do with the protocol. Like you said, POP3 is dead simple. This is within logic that sits above the protocol. That said, yeah, this is something they definitely should be testing. The fact that the article updated yesterday with a new knowledge base article and the status of the problem says they are looking into it, means they've been notified but not yet fixed it. If they haven't stopped that update from rolling out, someone at MS may come back to very unhappy managers on Monday, and have to explain why they thought leaving a data destroying bug live over the weekend was the right call...
- TheOtherHobbes 11y agoSomewhat related: LiveMail doesn't work reliably with Yahoo Mail. I was trying to fix email for a friend recently. Her UK ISP's email service is a rebranded Yahoo Mail account. It works fine on her iPad, but LiveMail in Win7 (she doesn't want Win10) regularly chokes on attachments. Turns out LiveMail can't cope if there's spam in a Yahoo trash account. And this bug has been around for years now. Not sure if incompetence, corporate dementia, or some nefarious plot to get users to switch to <whatever Microsoft's mail service is called this year.> Either way, I suggested she switch to Gmail.
- unsignedint 11y agoI sometimes speculate if it's coming from difference in focus of attention. I don't use Outlook myself any more, I know some who do. I know a lot of odd behavior in Outlook seems to be caused by where it involves connection with IMAP/POP3 protocol connection. (And I wouldn't think Microsoft employees are dogfooding them, either.) Empirically, it seems to be less of this problem occurring on the connection to the Exchange server, back when I was forced to use before. (Though at that time didn't have had so much of the connection, but had plenty of issues some involving broken database and such, I wouldn't touch with a ten foot pole myself...)
- sixothree 11y agoYou should see what outlook did to my IMAP folders.
- Aloha 11y agoI'm convinced outlook bar none is the worlds worst IMAP Client. (though I'm certain if Novell GroupWise supports IMAP, its somehow worse)
- frik 11y agoLook what Microsoft did with *.odt (OpenOffice/LibreOffice) compatibility. Now they show bogus security and compatibility warning dialogs if you open or save such a file. Look what they do with IMAP support in Outlook 2016. Pre-loading just the "Subject" (a feature supported since 1990s) got dropped, instead of the whole email incl attachments is downloaded. And now we learn POP3 got crippled too. The common Microsoft tactics to lock-in end-user and enterprise customers to proprietary ever changing protocols only fully supported by their most recent server software - their Exchange and Outlook.com/Office365 cloud eco-system. Microsoft wants you to upgrade to Windows 10 on PC, adopt it on smartphones (even it has just 1.1% market share), on servers, SQL-Server 2016, Exchange 2016, Office365 (subscription based Office 2016 client, cloud based SharePoint 2016 = OneDrive for Business on Azure), Skype for Business (=rebranded Lync), etc. Oh, and they ask you to install their telemetry services for Office on your clients, to get a "full picture". The telemetry and other phone home stuff cannot be turned off, except in the expensive LTSB license version. And several IPs and URLs are white lists in the kernel mode network layer, in all versions. It's up to you, to help Microsoft to create another monopoly. Or you out smart them and say no.
- keithpeter 11y ago"Look what Microsoft did with .odt (OpenOffice/LibreOffice) compatibility. Now they show bogus security and compatibility warning dialogs if you open or save such a file."* To be fair, oOo and LO always warn you when you want to save a file in MS Office format. Mind you, you can turn the notification off. Food for thought: one of my employers now deploys OpenOffice as well as MS Office after years of resisting that because of fears of user confusion. Guess what? No confusion apparent.
- xvilka 11y agoOpenOffice is dead, sadly refusing to accept it, so people still continuing to install it - check the commits count for the 2015 year. While LibreOffice does a very good job improving (including Microsoft formats support).
- 11y ago
- username223 11y ago> UPDATE 02/26/2016: ... TL;DR: Disable automatic updates... That's just good advice for dealing with modern software, for which fixes, breakage, and feature churn are all mixed in a single awful stream. "Newer" does not mean "better."
- Nutmog 11y agoI almost totally agree. If it wasn't for security fixes, there would be no value in updating almost any software. If it's already working OK, just leave it alone. 15 years ago when people had problems with their graphics cards, the standard "fix" was to update the driver. Now we're still updating drivers. Weren't the problems supposed to have been fixed many years ago? It seems they introduce as many new bugs as they fix, making the net effect of updates useless as far as bugs go. For security related bugs, stop using C++ for internet facing software.
- my5thaccount 11y agoIt's hard to explain to people, who aren't techies, why I, as a programmer, don't have the latest and greatest software installed asap. I still use Visual Source Safe for my personal projects. It's never failed me in 20 years. Right click, check out, right click checkin. Perfect every time.
- robzyb 11y ago> I still use Visual Source Safe for my personal projects. It's never failed me in 20 years. Right click, check out, right click checkin. Perfect every time. 1st reaction: Horrified that you are still using VSS. 2nd reaction: Was that if it does what you need it to, well, then, who am I to judge? It doesn't matter whether the tool was created yesterday or 20 years ago. 3rd reaction: Does it really do what you need it to do? I would guess that maybe svn/git has some simple featured that would significantly improve your life. 4th reaction: Wasn't VSS known as being super buggy? Is it just luck that you've escaped failure in 20 years?
- 11y ago
- daemonhunter 11y ago"Inbox Zero Assistance Features"
- ommunist 11y agoDoes this mean testing software before release at MS is second to none and relies on principle 'if users dont complain, we made it right'? UPD: I was just about to persuade client to move to Outlook 2016 from 2011. Glad I did not.
- alia1 11y agovery nice and faith full
- walkingolof 11y agoMan, I waited for a feature like this for at least 15 years, how do I get outlook in Linux ?!
- duncan_bayne 11y agoMany years ago I worked on the DPOP POP3 server and DList mailing list server, and did a little work on our company's SMTP and IMAP servers too. My experience was that most clients sucked. For example, one (Eudora?) would move IMAP messages by copy and delete (which may have been idiomatic, as I say it was a long time ago). But it wouldn't check the success of the copy operation, so a failure to copy would result in a delete, not a move. Seems they still suck in 2016, for what seem like trivial reasons. I mean, surely this sort of protocol interaction is very, very amenable to automated testing of some sort. We had a bunch of automated regression tests for our mail servers, written in C, back in the late nineties. I'm genuinely uncertain whether to blame incompetence or another attempt at the strategies spelled out in the Halloween Documents: http://www.catb.org/esr/halloween/faq.html http://www.catb.org/esr/halloween/faq.html
- Aloha 11y agoI was actually more surprised someone still used POP3 for direct client access - not a bad thing really - I just thought the world had migrated to IMAP.
- Dolores12 11y agoWhy cant they just improve what they have instead of re-writting it every X years and introducing new bugs?
- bcook 11y agoBecause that method has it's own problems too. https://en.m.wikipedia.org/wiki/Software_rot https://en.m.wikipedia.org/wiki/Software_rot
- astrange 11y agoAlso https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma
- astrange 11y agoAlso https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma
- astrange 11y agoAlso https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma https://en.m.wikipedia.org/wiki/The_Innovator%27s_Dilemma
- deleted 11y ago[deleted]
- slovette 11y agoEh.. What's life without a little salsa.
- dmbaggett 11y agoFrom a client standpoint, POP is not actually trivial. The main problem with POP is that unless you do something clever, determining the changes in the mailbox from time t0 to time t1 is both conceptually difficult and computationally expensive. This is because generic POP has no concept of a message UID, so there's no principled way to diff between states. In a very real sense, this means that POP is somewhat broken for the most important use case for the client: syncing to server changes. The UIDL extension adds a "UID" but it's just an MD5 hash of the contents -- meaning that multiple copies of a message appear to be the same message. And you can ask for just the headers -- which means you can get the message-id header -- but this is still very expensive to do repeatedly (say, every 5 minutes) on a 100,000 message POP store. And you can't ask for just the Message-Id header, which would fix the problem. Even if you have valid UIDs -- which you won't -- you still have to run a diff algorithm. Typical dynamic programming algorithms are O(N^2), which obviously sucks big time for a 100,000 message POP store. For Inky (http://inky.com http://inky.com) we use a clever linear-time diff algorithm based in part on [Meyers 86]: An O(ND) Difference Algorithm and Its Variations. [Burns & Long 97] A Linear Time, Constant Space Differencing Algorithm is also a good treatment. But I know Outlook and Thunderbird both use non-linear-time algorithms to diff, so "leave messages on server" gets increasingly (non-linearly) expensive as the mailbox size grows on the server. A few other points on comments made in this thread: - POP is still widely used. In the US, for example, Comcast has finally migrated to IMAP, but Verizon is still POP only. - POP is, from the server standpoint, a very simple protocol, and it is highly amenable to automated testing, as others here have pointed out. For our own testing we generate both patterned and random mailbox modification sequences, then have the test client cooperate with the test server to ensure that the client has (independently) correctly determined what's happened to the (test) mailbox. This is a perfect example of a situation where investing significant effort into automated testing pays off -- and where a TDD approach to development would also work well.
- userbinator 11y agoThe UIDL extension adds a "UID" but it's just an MD5 hash of the contents -- meaning that multiple copies of a message appear to be the same message. That sounds like a server problem; to quote the RFC, The server should never reuse an unique-id in a given maildrop, for as long as the entity using the unique-id exists. Why would you hash the contents? The arrival time should be unique, assuming no two messages could arrive at exactly the same time. That doesn't require any hashing. I think POP could've been far better designed, without growing into the complexity of IMAP, with just a few little changes like this.
- EugeneOZ 11y agoUpdate for those who dreamed about empty inbox.
- singlow 11y agoI wasted a couple hours trying to help one of my clients who had this problem last week. What a pain it was. He had 5 devices connected to his account, 2 on pop and 3 on imap. It took 20 minutes just so listen to his explanation of emails appearing and disappearing and re-appearing based on which account saw them first. We spent the next hour turning on each device one at a time until we determined that his outlook pop client was the one deleting them, even though it was configured to leave them.
- xpda 11y agoThis is typical of software development in recent years. The emphasis on newer platforms and technology (in the case iMap) results in new user interface limitations, as well as bugs, for existing users of older technologies (i.e. desktop, keyboard access, and Pop3). I've found eM Client to be a good alternative to Outlook and WLM.
- quattrofan 11y agoI loath outlook with the power of a 1000 suns. Give me gmail anyday.
- makecheck 11y agoI think greater compartmentalization of software is long overdue. For a program like this, there ought to be a Sacred Core that Does Very Little and has implementations of key protocols that can’t be touched without the blessing of about 5 senior engineers and the personal seal of the CEO or some such. In other words, it should be unbelievably hard to screw with parts of the program that are crucial, while making changes that shouldn’t have anything to do with it. (Heck, for all we know, they were adding Windows 10 Tiles™ when this screw-up occurred.)
- fanf2 11y agoMicrosoft keep rewriting their mail protocol implementations and fucking them up in new ways.
- nine_k 11y agoThe widespread use of POP (well, any significant use of POP) is what makes me sad the most.