One year ago this week, I wrote ( twice ) about some privacy problems that were being experienced by users of the Evolution Mail email client from the Gnome project . Problems that they turned out to have known about for years, and weren't happy about me publicising. A few days later, I wrote about a bug that allows an email sender to easily consume all of an Evolution Mail users free disk space,…
For the past 15 years or so, I've been using a simple Perl script that I wrote called gpgit to encrypt email stored on my mail server, both incoming and outgoing . It just takes a raw email on stdin and writes the modified email to stdout. It has always been in the back of my mind that I could do a lot more than just encrypting an email, from a privacy and security perspective, but I never felt I…
I released a new project recently which scratched an itch I've had for a while. I subscribe to a number of calendars, and I wanted to receive notifications about any changes to those calendars, as they happen. My new project to solve this problem is calendiff . It's open source, self hosted, and the idea is that you run it on a schedule from cron or a systemd timer etc. You point it at an ICS URL,…
I've been developing a sandbox to run Claude inside of, for a little while now. It's basically a python script that runs a podman container with Claude inside with your CWD mounted inside it. You optionally create a .claude-sandbox.toml file inside that directory, with configuration. There are a lot of config options (see https://gitlab.com/grepular/claude-sandbox ). I want to concentrate on my…
I have a Tesla Powerwall (bought before Elon completely lost the plot and started openly supporting and funding far right, populist, shit stains, across the World). I received an update for the Tesla app on my phone today, which came with a new, "Home Status," summary option. When you request it, after a few seconds, it gives you a human readable summary of the status of your solar + battery…
This isn't limited to NodeJS, but it seems to happen a lot more frequently in that ecosystem. A commonly used dependency gets compromised, developers install it when doing an npm install, or updating packages, and they now have a trojan running on their host. A trojan that gives the attacker access to run arbitrary code, e.g keyloggers to steal passwords as they are entered, theft of bitcoin…
This is a tale as old as email, but it made me laugh so I thought I'd share it. I have an account with https://stadiamaps.com . I don't even remember setting it up, so it's certainly not something I've used in a long time. Anyway, I received an email from them today: Support my work: PayPal Bitcoin
About 14 years ago I set up DNSSEC . I've been running it on all of my domains ever since, without issue. First using bind9 and then later using PowerDNS . From today, all Certificate Authorities (CAs) must validate DNSSEC when a domain has it enabled. Support my work: PayPal Bitcoin
In a recent post, here I spoke briefly about how I use browser tests to test this website. This has come a long way since I wrote that post so I thought I would detail exactly what I'm doing and why. I wanted to be able to confidently change CSS and JavaScript and templates and code on this website without breaking anything. I wanted to be able to detect regressions due to code changes, or just…
I have a project that I first started building over 10 years ago and it occurred to me recently that I have never blogged about it. It is a website called ParseMail . I have been running email systems personally, and at different points during my career, for going on 25 years now. I built ParseMail, because I wanted to be able to view email content differently. Email clients hide a lot of…