Sign in

Mike Cardwell

@grepular.com
35 followers 9 following 38 posts

Linux, DevOps, Sysadmin, Developer, Full Stack, NodeJS, Python, Security, Docker, AWS, GCP, Keyword Stuffer from East Midlands, England, Britain, United Kingdom www.grepular.com

PostsRepliesMedia
Mike Cardwell @grepular.com · 04/10/2026
GKG Net Bad Domain Registrar - www.grepular.com/GKG_Net_Bad_... - gkg.net
grepular.com
GKG Net Bad Domain Registrar
In the past I have recommended GKG as a domain registrar to people. They have a simple website, advertise a support email address on their front page,...
000
Mike Cardwell @grepular.com · 05/09/2026
Hardening Container Images - www.grepular.com/Hardening_Co...
grepular.com
Hardening Container Images
I recently set up a new server using Flatcar Container Linux. I decided that any container that I put on this system should be "hardened" from the start....
000
Mike Cardwell @grepular.com · 24/07/2026
UK gov departments should be sanitising incoming email using www.grepular.com/Sanitising_E... or a similar tool of NCSC's creation. Using Sanimail with "--policy standard" would have defended against this particular attack and also others, even if the readers email clients weren't patched up to date
000
Mike Cardwell @grepular.com · 24/07/2026
www.theregister.com/patches/2026... - Sanimail with "--policy standard" would have defended against this attack and others. See www.grepular.com/Sanitising_E... @ncsc.gov.uk
theregister.com
Year-long Russian attacks infect users as soon as they look at an email
Phishing for dummies
000
Mike Cardwell @grepular.com · 03/07/2026
Evolution Mail Users Easily Trackable Part 3, One Year On - www.grepular.com/Evolution_Ma...
grepular.com
Evolution Mail Users Easily Trackable Part 3, One Year On
One year ago this week, I wrote ( twice ) about some privacy problems that were being experienced by users of the Evolution Mail email client from the...
010
Mike Cardwell @grepular.com · 22/06/2026
Sanitising Email - www.grepular.com/Sanitising_E...
grepular.com
Sanitising Email
For the past 15 years or so, I've been using a simple Perl script that I wrote called gpgit to encrypt email stored on my mail server, both incoming and...
000
Mike Cardwell @grepular.com · 17/06/2026
Claude just decided to delete my entire calendar instead of one calendar event. Luckily I have good backups. Being shafted by an LLM for the first time feels like a milestone.
010
Mike Cardwell @grepular.com · 10/05/2026
Notifications on Calendar Changes - www.grepular.com/Notification...
grepular.com
Notifications on Calendar Changes
I released a new project recently which scratched an itch I've had for a while. I subscribe to a number of calendars, and I wanted to receive...
000
Mike Cardwell @grepular.com · 08/05/2026
Auth Proxy Injection for LLMs - www.grepular.com/Auth_Proxy_I...
000
Mike Cardwell @grepular.com · 04/05/2026
Gave Claude CLI access to my Home Assistant API and Websocket via the auth injecting proxy in my sandbox gitlab.com/grepular/cla... - It's such a pleasure using Claude to write complex Home Assistant automations, compared to using the web UI. #homeassistant
000
Mike Cardwell @grepular.com · 10/04/2026
Development AI vs Runtime AI - www.grepular.com/Development_...
grepular.com
Development AI vs Runtime AI
I have a Tesla Powerwall (bought before Elon completely lost the plot and started openly supporting and funding far right, populist, shit stains, across...
000
Mike Cardwell @grepular.com · 01/04/2026
Protecting Your Host from Malicious Dependencies - www.grepular.com/Protecting_Y...
grepular.com
Protecting Your Host from Malicious Dependencies
This isn't limited to NodeJS, but it seems to happen a lot more frequently in that ecosystem. A commonly used dependency gets compromised, developers...
000
Mike Cardwell @grepular.com · 20/03/2026
Stadia Maps Privacy Fail - www.grepular.com/Stadia_Maps_...
grepular.com
Stadia Maps Privacy Fail
This is a tale as old email, but it made me laugh so I thought I'd share it. I have an account with https://stadiamaps.com . I don't even remember setting...
011
Mike Cardwell @grepular.com · 15/03/2026
Cert Authorities Check for DNSSEC From Today - www.grepular.com/Cert_Authori...
grepular.com
Cert Authorities Check for DNSSEC From Today
About 14 years ago I set up DNSSEC . I've been running it on all of my domains ever since, without issue. First using bind9 and then later using PowerDNS...
000
Mike Cardwell @grepular.com · 14/03/2026
Happy Pi Day
000
Mike Cardwell @grepular.com · 08/03/2026
Website Testing on Steroids - www.grepular.com/Website_Test...
grepular.com
Website Testing on Steroids
In a recent post, here I spoke briefly about how I use browser tests to test this website. This has come a long way since I wrote that post so I thought I...
000
Mike Cardwell @grepular.com · 22/02/2026
ParseMail - www.grepular.com/ParseMail
grepular.com
ParseMail - grepular.com
I have a project that I first started building over 10 years ago and it occurred to me recently that I have never blogged about it. It is a website called...
000
Mike Cardwell @grepular.com · 18/02/2026
New Website, New Technology - www.grepular.com/New_Website_...
grepular.com
New Website, New Technology - grepular.com
If you come here occasionally, you may have noticed that the style of my website has changed completely. I've built a new website using Go . The old...
110
Mike Cardwell @grepular.com · 18/02/2026
Somebody knows how to use his browser dev tools www.bbc.co.uk/news/article...
bbc.co.uk
Spain luxury hotel scammer 'booked rooms for one cent'
Police arrest a 20-year-old suspected of defrauding a luxury Madrid hotel of more than €20,000 by manipulating an online payment system.
010
Mike Cardwell @grepular.com · 25/01/2026
I got myself a Claude Pro plan. The quota is so low I ran out of the 5 hour quota in 90 mins, twice, and after 3 hours of total coding time, I've used 29% of my weekly quota. They should rename the "Pro" plan to "Toy" and the "Max" plan to "Min". Does the "Pro" plan actually work for anyone?
020
Mike Cardwell @grepular.com · 19/01/2026
Apple's "Protect Mail Activity" Doesn't Work - www.grepular.com/Apples_Prote...
grepular.com
Apple's "Protect Mail Activity" Doesn't Work - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
020
Reposted by Mike Cardwell
Red Sift @redsift.com · 12/01/2026
Security scanners surface issues, but rarely explain what to fix first or why it matters. Red Sift Radar Lite helps close that gap. Enter a domain to get a prioritized assessment with clear guidance on what to do next. Free to use, no signup required: redsift.com/tools/radar-...
012
Mike Cardwell @grepular.com · 04/10/2025
People are talking how #Xbox Game Pass Ultimate is increasing in price by 50%. Whilst true, it's actually a 75% increase on what I was paying a year ago, here in the UK. And a 110% increase on what I was paying 2 years ago.
000
Mike Cardwell @grepular.com · 01/08/2025
Immortal SSH Sessions - www.grepular.com/Immortal_SSH...
grepular.com
Immortal SSH Sessions - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
110
Mike Cardwell @grepular.com · 22/07/2025
Fun With Gzip Bombs and Email Clients - www.grepular.com/Fun_with_Gzi...
grepular.com
Fun with Gzip Bombs and Email Clients - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
110
Mike Cardwell @grepular.com · 20/07/2025
Jeff Fortin doubles down on this insane idea that is apparently prevalent at GNOME that security vulnerabilities in dependencies can be ignored indefinitely as long as a bug report exists. Never seen this opinion outside of GNOME. gitlab.gnome.org/GNOME/geary/...
000
Mike Cardwell @grepular.com · 19/07/2025
Finally got around to creating my "Bad Email Clients" page - www.emailprivacytester.com/badClients - I will update it with more clients in time.
emailprivacytester.com
100
Mike Cardwell @grepular.com · 19/07/2025
Andre Klapper went and closed both issues. Presumably he's worried how bad they will look if the devs for either client went and actually addressed this issue instead of passing the buck.
110
Mike Cardwell @grepular.com · 19/07/2025
Email clients Balsa and Geary are also vulnerable to the link preconnect privacy issue I recently blogged about in Evolution Mail. Although not to the dns prefetch one. New bugs at gitlab.gnome.org/GNOME/geary/... and gitlab.gnome.org/GNOME/balsa/...
gitlab.gnome.org
Making sure you're not a bot!
100
Mike Cardwell @grepular.com · 18/07/2025
Evolution Mail Users Easily Trackable Part 2 - www.grepular.com/Evolution%20...
000
Mike Cardwell @grepular.com · 17/07/2025
I've added a new test to the Email Privacy Tester www.emailprivacytester.com/testDescript... - This one gives you the client IP of Evolution Mail users prior to clicking "Load Remote Content". May affect other clients too.
010
Mike Cardwell @grepular.com · 09/07/2025
Evolution Mail Users Easily Trackable - www.grepular.com/Evolution_Ma...
grepular.com
Evolution Mail Users Easily Trackable - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
000
Mike Cardwell @grepular.com · 15/05/2025
Exim users. I made you a fancy Docker image - hub.docker.com/r/grepular/e...
hub.docker.com
000
Mike Cardwell @grepular.com · 07/04/2025
Always fun to get an update on a Mozilla Thunderbird security bug I reported 13 years ago. Finally changed from Status: new to Status: assigned. By some automation though so probably doesn't mean anyone will actually look at it - bugzilla.mozilla.org/show_bug.cgi...
bugzilla.mozilla.org
700979 - Can force webpage links to open in Thunderbird Tabs
ASSIGNED (mkmelin+mozilla) in Thunderbird - Message Reader UI. Last updated 2025-04-07.
000
Mike Cardwell @grepular.com · 06/04/2025
After years of self hosting NextCloud, and before that OwnCloud, I have finally migrated to Radicale. Running a humongous php app when all I wanted was calendar and contacts sync never quite sat right with me. Syncthing has been there for my file syncing needs.
010
Mike Cardwell @grepular.com · 26/03/2025
Copilot just randomly suggested I leave a comment "This is a bit of a hack but it works" next to some code I wrote
000
Mike Cardwell @grepular.com · 06/03/2025
Blocking Russian IPs - www.grepular.com/Blocking_Rus...
grepular.com
Blocking Russian IPs - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
000
Mike Cardwell @grepular.com · 12/02/2025
Realised I'd accidentally left a Twitter link on www.emailprivacytester.com. Gross. Removed with haste.
emailprivacytester.com
If this is your first time here, you might want to read the about page and/or the privacy policy.Sorry, but you'll need to enable JavaScript to use the form below. On the plus side, there is no cross-origin content.
000
Mike Cardwell @grepular.com · 25/01/2025
Hello World. Here to see what all the fuss is about. Will most likely post my Blog posts here from www.grepular.com/blog/
grepular.com
Blog - Grepular
Mike Cardwell's Tech Blog. Security, privacy, and technology
020