Mike Cardwell

Immortal SSH Sessions - www.grepular.com/Immortal_SSH...

Fun With Gzip Bombs and Email Clients - www.grepular.com/Fun_with_Gzi...

Jeff Fortin doubles down on this insane idea that is apparently prevalent at GNOME that security vulnerabilities in dependencies can be ignored indefinitely as long as a bug report exists. Never seen this opinion outside of GNOME. gitlab.gnome.org/GNOME/geary/...

Finally got around to creating my "Bad Email Clients" page - www.emailprivacytester.com/badClients - I will update it with more clients in time.

Andre Klapper went and closed both issues. Presumably he's worried how bad they will look if the devs for either client went and actually addressed this issue instead of passing the buck.

Email clients Balsa and Geary are also vulnerable to the link preconnect privacy issue I recently blogged about in Evolution Mail. Although not to the dns prefetch one. New bugs at gitlab.gnome.org/GNOME/geary/... and gitlab.gnome.org/GNOME/balsa/...

Evolution Mail Users Easily Trackable Part 2 - www.grepular.com/Evolution%20...

I've added a new test to the Email Privacy Tester www.emailprivacytester.com/testDescript... - This one gives you the client IP of Evolution Mail users prior to clicking "Load Remote Content". May affect other clients too.

Evolution Mail Users Easily Trackable - www.grepular.com/Evolution_Ma...

Exim users. I made you a fancy Docker image - hub.docker.com/r/grepular/e...

Always fun to get an update on a Mozilla Thunderbird security bug I reported 13 years ago. Finally changed from Status: new to Status: assigned. By some automation though so probably doesn't mean anyone will actually look at it - bugzilla.mozilla.org/show_bug.cgi...

After years of self hosting NextCloud, and before that OwnCloud, I have finally migrated to Radicale. Running a humongous php app when all I wanted was calendar and contacts sync never quite sat right with me. Syncthing has been there for my file syncing needs.

Copilot just randomly suggested I leave a comment "This is a bit of a hack but it works" next to some code I wrote

Blocking Russian IPs - www.grepular.com/Blocking_Rus...

If this is your first time here, you might want to read the about page and/or the privacy policy.Sorry, but you'll need to enable JavaScript to use the form below. On the plus side, there is no cross-origin content.

Realised I'd accidentally left a Twitter link on www.emailprivacytester.com. Gross. Removed with haste.

Hello World. Here to see what all the fuss is about. Will most likely post my Blog posts here from www.grepular.com/blog/