One year ago this week, I wrote 
( twice ) about some privacy
problems that were being experienced by users of the Evolution
Mail email client from the Gnome
project . Problems that they turned out to have known
about for years, and weren't
happy 
about me publicising. 
 A few days later, I wrote about a bug
that allows an email sender to easily consume all of…
For the past 15 years or so, I've been using a simple
 Perl script that I wrote called
 gpgit to encrypt email stored on my mail
server, both incoming and
 outgoing . It just takes a
raw email on stdin and writes the modified email to stdout. It has always been
in the back of my mind that I could do a lot more than just encrypting an email,
from a privacy and security…
I released a new project recently which scratched an itch I've had for a while.
I subscribe to a number of calendars, and I wanted to receive notifications
about any changes to those calendars, as they happen. My new project to solve
this problem is calendiff . It's open
source, self hosted, and the idea is that you run it on a schedule from cron or
a systemd timer etc. You…
I've been developing a sandbox to run Claude inside of, for a little while now.
It's basically a python script that runs a podman container with Claude inside
with your CWD mounted inside it. You optionally create a .claude-sandbox.toml
file inside that directory, with configuration. There are a lot of config
options (see
 https://gitlab.com/grepular/claude-sandbox 
). I…
I have a Tesla Powerwall (bought before Elon completely lost the plot and
started openly supporting and funding far right, populist, shit stains, across
the World). I received an update for the Tesla app on my phone today, which came
with a new, "Home Status," summary option. When you request it, after a few
seconds, it gives you a human readable summary of the status of your solar…
This isn't limited to NodeJS, but it seems to happen a lot more frequently in
that ecosystem. A commonly used dependency gets compromised, developers install
it when doing an npm install, or updating packages, and they now have a trojan
running on their host. A trojan that gives the attacker access to run arbitrary
code, e.g keyloggers to steal passwords as they are entered, theft…
This is a tale as old as email, but it made me laugh so I thought I'd share it.
I have an account with https://stadiamaps.com . I don't
even remember setting it up, so it's certainly not something I've used in a long time. 
 Anyway, I received an email from them today: Support my work: PayPal Bitcoin
About 14 years ago I set up
DNSSEC . I've been running it on
all of my domains ever since, without issue. First using
 bind9 and then later using PowerDNS . 
 From today, all Certificate Authorities (CAs) must validate
DNSSEC 
when a domain has it enabled. Support my work: PayPal Bitcoin
In a recent post, here I spoke
briefly about how I use browser tests to test this website. This has come a long
way since I wrote that post so I thought I would detail exactly what I'm doing
and why. 
 I wanted to be able to confidently change CSS and JavaScript and templates and
code on this website without breaking anything. I wanted to be able to detect
regressions due…
I have a project that I first started building over 10 years ago and it occurred
to me recently that I have never blogged about it. It is a website called
 ParseMail . I have been running email systems
personally, and at different points during my career, for going on 25 years now.
I built ParseMail, because I wanted to be able to view email content
differently. Email clients…