Posts by Mike Cardwell
Happy Pi Day
I got myself a Claude Pro plan. The quota is so low I ran out of the 5 hour quota in 90 mins, twice, and after 3 hours of total coding time, I've used 29% of my weekly quota. They should rename the "Pro" plan to "Toy" and the "Max" plan to "Min". Does the "Pro" plan actually work for anyone?
Security scanners surface issues, but rarely explain what to fix first or why it matters.
Red Sift Radar Lite helps close that gap. Enter a domain to get a prioritized assessment with clear guidance on what to do next.
Free to use, no signup required: redsift.com/tools/radar-...
People are talking how #Xbox Game Pass Ultimate is increasing in price by 50%. Whilst true, it's actually a 75% increase on what I was paying a year ago, here in the UK. And a 110% increase on what I was paying 2 years ago.
Jeff Fortin doubles down on this insane idea that is apparently prevalent at GNOME that security vulnerabilities in dependencies can be ignored indefinitely as long as a bug report exists. Never seen this opinion outside of GNOME. gitlab.gnome.org/GNOME/geary/...
Finally got around to creating my "Bad Email Clients" page - www.emailprivacytester.com/badClients - I will update it with more clients in time.
Andre Klapper went and closed both issues. Presumably he's worried how bad they will look if the devs for either client went and actually addressed this issue instead of passing the buck.
Email clients Balsa and Geary are also vulnerable to the link preconnect privacy issue I recently blogged about in Evolution Mail. Although not to the dns prefetch one. New bugs at gitlab.gnome.org/GNOME/geary/... and gitlab.gnome.org/GNOME/balsa/...
Evolution Mail Users Easily Trackable Part 2 - www.grepular.com/Evolution%20...
I've added a new test to the Email Privacy Tester www.emailprivacytester.com/testDescript... - This one gives you the client IP of Evolution Mail users prior to clicking "Load Remote Content". May affect other clients too.
Exim users. I made you a fancy Docker image - hub.docker.com/r/grepular/e...
Always fun to get an update on a Mozilla Thunderbird security bug I reported 13 years ago. Finally changed from Status: new to Status: assigned. By some automation though so probably doesn't mean anyone will actually look at it - bugzilla.mozilla.org/show_bug.cgi...
After years of self hosting NextCloud, and before that OwnCloud, I have finally migrated to Radicale. Running a humongous php app when all I wanted was calendar and contacts sync never quite sat right with me. Syncthing has been there for my file syncing needs.
Copilot just randomly suggested I leave a comment "This is a bit of a hack but it works" next to some code I wrote