Sign in

Mike Cardwell

@grepular.com
35 followers 9 following 38 posts

Linux, DevOps, Sysadmin, Developer, Full Stack, NodeJS, Python, Security, Docker, AWS, GCP, Keyword Stuffer from East Midlands, England, Britain, United Kingdom www.grepular.com

PostsRepliesMedia
Mike Cardwell @grepular.com · 04/10/2026
GKG Net Bad Domain Registrar - www.grepular.com/GKG_Net_Bad_... - gkg.net
grepular.com
GKG Net Bad Domain Registrar
In the past I have recommended GKG as a domain registrar to people. They have a simple website, advertise a support email address on their front page,...
000
Mike Cardwell @grepular.com · 05/09/2026
Hardening Container Images - www.grepular.com/Hardening_Co...
grepular.com
Hardening Container Images
I recently set up a new server using Flatcar Container Linux. I decided that any container that I put on this system should be "hardened" from the start....
000
Mike Cardwell @grepular.com · 24/07/2026
www.theregister.com/patches/2026... - Sanimail with "--policy standard" would have defended against this attack and others. See www.grepular.com/Sanitising_E... @ncsc.gov.uk
theregister.com
Year-long Russian attacks infect users as soon as they look at an email
Phishing for dummies
000
Mike Cardwell @grepular.com · 03/07/2026
Evolution Mail Users Easily Trackable Part 3, One Year On - www.grepular.com/Evolution_Ma...
grepular.com
Evolution Mail Users Easily Trackable Part 3, One Year On
One year ago this week, I wrote ( twice ) about some privacy problems that were being experienced by users of the Evolution Mail email client from the...
010
Mike Cardwell @grepular.com · 22/06/2026
Sanitising Email - www.grepular.com/Sanitising_E...
grepular.com
Sanitising Email
For the past 15 years or so, I've been using a simple Perl script that I wrote called gpgit to encrypt email stored on my mail server, both incoming and...
000
Mike Cardwell @grepular.com · 17/06/2026
Claude just decided to delete my entire calendar instead of one calendar event. Luckily I have good backups. Being shafted by an LLM for the first time feels like a milestone.
010
Mike Cardwell @grepular.com · 10/05/2026
Notifications on Calendar Changes - www.grepular.com/Notification...
grepular.com
Notifications on Calendar Changes
I released a new project recently which scratched an itch I've had for a while. I subscribe to a number of calendars, and I wanted to receive...
000
Mike Cardwell @grepular.com · 08/05/2026
Auth Proxy Injection for LLMs - www.grepular.com/Auth_Proxy_I...
000
Mike Cardwell @grepular.com · 04/05/2026
Gave Claude CLI access to my Home Assistant API and Websocket via the auth injecting proxy in my sandbox gitlab.com/grepular/cla... - It's such a pleasure using Claude to write complex Home Assistant automations, compared to using the web UI. #homeassistant
000
Mike Cardwell @grepular.com · 10/04/2026
Development AI vs Runtime AI - www.grepular.com/Development_...
grepular.com
Development AI vs Runtime AI
I have a Tesla Powerwall (bought before Elon completely lost the plot and started openly supporting and funding far right, populist, shit stains, across...
000
Mike Cardwell @grepular.com · 01/04/2026
Protecting Your Host from Malicious Dependencies - www.grepular.com/Protecting_Y...
grepular.com
Protecting Your Host from Malicious Dependencies
This isn't limited to NodeJS, but it seems to happen a lot more frequently in that ecosystem. A commonly used dependency gets compromised, developers...
000
Mike Cardwell @grepular.com · 20/03/2026
Stadia Maps Privacy Fail - www.grepular.com/Stadia_Maps_...
grepular.com
Stadia Maps Privacy Fail
This is a tale as old email, but it made me laugh so I thought I'd share it. I have an account with https://stadiamaps.com . I don't even remember setting...
011
Mike Cardwell @grepular.com · 15/03/2026
Cert Authorities Check for DNSSEC From Today - www.grepular.com/Cert_Authori...
grepular.com
Cert Authorities Check for DNSSEC From Today
About 14 years ago I set up DNSSEC . I've been running it on all of my domains ever since, without issue. First using bind9 and then later using PowerDNS...
000
Mike Cardwell @grepular.com · 14/03/2026
Happy Pi Day
000
Mike Cardwell @grepular.com · 08/03/2026
Website Testing on Steroids - www.grepular.com/Website_Test...
grepular.com
Website Testing on Steroids
In a recent post, here I spoke briefly about how I use browser tests to test this website. This has come a long way since I wrote that post so I thought I...
000
Mike Cardwell @grepular.com · 22/02/2026
ParseMail - www.grepular.com/ParseMail
grepular.com
ParseMail - grepular.com
I have a project that I first started building over 10 years ago and it occurred to me recently that I have never blogged about it. It is a website called...
000
Mike Cardwell @grepular.com · 18/02/2026
New Website, New Technology - www.grepular.com/New_Website_...
grepular.com
New Website, New Technology - grepular.com
If you come here occasionally, you may have noticed that the style of my website has changed completely. I've built a new website using Go . The old...
110
Mike Cardwell @grepular.com · 18/02/2026
Somebody knows how to use his browser dev tools www.bbc.co.uk/news/article...
bbc.co.uk
Spain luxury hotel scammer 'booked rooms for one cent'
Police arrest a 20-year-old suspected of defrauding a luxury Madrid hotel of more than €20,000 by manipulating an online payment system.
010
Mike Cardwell @grepular.com · 25/01/2026
I got myself a Claude Pro plan. The quota is so low I ran out of the 5 hour quota in 90 mins, twice, and after 3 hours of total coding time, I've used 29% of my weekly quota. They should rename the "Pro" plan to "Toy" and the "Max" plan to "Min". Does the "Pro" plan actually work for anyone?
020
Mike Cardwell @grepular.com · 19/01/2026
Apple's "Protect Mail Activity" Doesn't Work - www.grepular.com/Apples_Prote...
grepular.com
Apple's "Protect Mail Activity" Doesn't Work - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
020
Reposted by Mike Cardwell
Red Sift @redsift.com · 12/01/2026
Security scanners surface issues, but rarely explain what to fix first or why it matters. Red Sift Radar Lite helps close that gap. Enter a domain to get a prioritized assessment with clear guidance on what to do next. Free to use, no signup required: redsift.com/tools/radar-...
012
Mike Cardwell @grepular.com · 04/10/2025
People are talking how #Xbox Game Pass Ultimate is increasing in price by 50%. Whilst true, it's actually a 75% increase on what I was paying a year ago, here in the UK. And a 110% increase on what I was paying 2 years ago.
000
Mike Cardwell @grepular.com · 01/08/2025
Immortal SSH Sessions - www.grepular.com/Immortal_SSH...
grepular.com
Immortal SSH Sessions - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
110
Mike Cardwell @grepular.com · 22/07/2025
Fun With Gzip Bombs and Email Clients - www.grepular.com/Fun_with_Gzi...
grepular.com
Fun with Gzip Bombs and Email Clients - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
110
Mike Cardwell @grepular.com · 20/07/2025
Jeff Fortin doubles down on this insane idea that is apparently prevalent at GNOME that security vulnerabilities in dependencies can be ignored indefinitely as long as a bug report exists. Never seen this opinion outside of GNOME. gitlab.gnome.org/GNOME/geary/...
000
Mike Cardwell @grepular.com · 19/07/2025
Finally got around to creating my "Bad Email Clients" page - www.emailprivacytester.com/badClients - I will update it with more clients in time.
emailprivacytester.com
100
Mike Cardwell @grepular.com · 19/07/2025
Email clients Balsa and Geary are also vulnerable to the link preconnect privacy issue I recently blogged about in Evolution Mail. Although not to the dns prefetch one. New bugs at gitlab.gnome.org/GNOME/geary/... and gitlab.gnome.org/GNOME/balsa/...
gitlab.gnome.org
Making sure you're not a bot!
100
Mike Cardwell @grepular.com · 18/07/2025
Evolution Mail Users Easily Trackable Part 2 - www.grepular.com/Evolution%20...
000
Mike Cardwell @grepular.com · 17/07/2025
I've added a new test to the Email Privacy Tester www.emailprivacytester.com/testDescript... - This one gives you the client IP of Evolution Mail users prior to clicking "Load Remote Content". May affect other clients too.
010
Mike Cardwell @grepular.com · 09/07/2025
Evolution Mail Users Easily Trackable - www.grepular.com/Evolution_Ma...
grepular.com
Evolution Mail Users Easily Trackable - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
000
Mike Cardwell @grepular.com · 15/05/2025
Exim users. I made you a fancy Docker image - hub.docker.com/r/grepular/e...
hub.docker.com
000
Mike Cardwell @grepular.com · 07/04/2025
Always fun to get an update on a Mozilla Thunderbird security bug I reported 13 years ago. Finally changed from Status: new to Status: assigned. By some automation though so probably doesn't mean anyone will actually look at it - bugzilla.mozilla.org/show_bug.cgi...
bugzilla.mozilla.org
700979 - Can force webpage links to open in Thunderbird Tabs
ASSIGNED (mkmelin+mozilla) in Thunderbird - Message Reader UI. Last updated 2025-04-07.
000
Mike Cardwell @grepular.com · 06/04/2025
After years of self hosting NextCloud, and before that OwnCloud, I have finally migrated to Radicale. Running a humongous php app when all I wanted was calendar and contacts sync never quite sat right with me. Syncthing has been there for my file syncing needs.
010
Mike Cardwell @grepular.com · 26/03/2025
Copilot just randomly suggested I leave a comment "This is a bit of a hack but it works" next to some code I wrote
000
Mike Cardwell @grepular.com · 06/03/2025
Blocking Russian IPs - www.grepular.com/Blocking_Rus...
grepular.com
Blocking Russian IPs - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
000
Mike Cardwell @grepular.com · 12/02/2025
Realised I'd accidentally left a Twitter link on www.emailprivacytester.com. Gross. Removed with haste.
emailprivacytester.com
If this is your first time here, you might want to read the about page and/or the privacy policy.Sorry, but you'll need to enable JavaScript to use the form below. On the plus side, there is no cross-origin content.
000
Mike Cardwell @grepular.com · 25/01/2025
Hello World. Here to see what all the fuss is about. Will most likely post my Blog posts here from www.grepular.com/blog/
grepular.com
Blog - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
020