mike-cardwell

8 ms·

91.
by mike-cardwell 1y ago
The list is brand new. I will be updating it as I have time to test clients.
92.
by mike-cardwell 1y ago
If only the developers of Evolution Mail made any effort to get the issue fixed in the 15 months they've known about it. It's unacceptable to sit on a privacy affecting bug like this for 15 months. This continously repeated bull
93.
Known Bad Email Clients(emailprivacytester.com)
66 points by mike-cardwell 1y ago|64 comments
94.
by mike-cardwell 1y ago
Andre Klapper went and closed both issues. Presumably he's worried how bad they will look if the devs for either client went and actually addressed this issue instead of passing the buck and doing nothing like Evolution Mail have.
95.
by mike-cardwell 1y ago
My blog posts denounced the projects approach to handling security/privacy issues in the software they distribute. They also recommended people stop using the software because it is insecure, and this issue is not being taken seriously
96.
by mike-cardwell 1y ago
> it very probably affects Balsa and Geary at least I've just tested, and both fail the link preconnect test but neither fail the dns prefetch test. So the original bug I posted is on the Evolution Mail side, not the Webkit side. If
97.
by mike-cardwell 1y ago
So, at work, you find out a library you're using is insecure. Do you: 1. Submit a bug report to the library and then do nothing else, for over a year, with no end in sight, and say it's not your problem, you can't fix it, and
98.
by mike-cardwell 1y ago
You use an insecure library in your product, it is your responsibility to deal with that situation yes. You can deal with it by: 1. Fixing the insecure library 2. Getting somebody else to fix the insecure library 3. Switching to a different
99.
by mike-cardwell 1y ago
It's actually pretty ok for casual browsing these days. Have you tried it recently?
100.
by mike-cardwell 1y ago
Those that aren't willing to pay for it directly, can still use it for free, but will just have to tolerate product placement.
101.
by mike-cardwell 1y ago
Yes
102.
Evolution Mail Users Easily Trackable(grepular.com)
114 points by mike-cardwell 1y ago|66 comments
103.
by mike-cardwell 1y ago
Was a local error. Fixed now
104.
by mike-cardwell 1y ago
Sorry about that. Try again now
105.
by mike-cardwell 1y ago
And use https://www.emailprivacytester.com to test that your email client is configured correctly
106.
by mike-cardwell 1y ago
Came up in a thread on a different submission, so thought I'd submit it even though it's a bit old, as it's still relevant today - https://news.ycombinator.com/item?id=44211612
107.
Nginx Restic Back End(grepular.com)
48 points by mike-cardwell 1y ago|7 comments
108.
by mike-cardwell 1y ago
You say "only with the restic backend" but you can do it with a simple Nginx backend too https://www.grepular.com/Nginx_Restic_Backend - The restic server part is redundant
109.
by mike-cardwell 1y ago
Hmm. I assumed this worked like torsocks in that it would direct traffic through the locally running tor daemon. However, I've noticed that if I stop the locally running tor daemon, oniux still works whilst torify and torsocks do not.
110.
by mike-cardwell 1y ago
Instructions on front page for install don't work. Need to change the version number from 0.4.0 to 0.5.0 cargo install --git https://gitlab.torproject.org/tpo/core/oniux oniux@0.5.0
111.
by mike-cardwell 1y ago
And what commands do I run if I want to do 100 screenshots per second?
112.
by mike-cardwell 1y ago
Precisely. Seems fairly likely the tariffs will be gone 5 years from now one way or another. Who in their right mind would build a business based on those tariffs still existing into the future.
113.
by mike-cardwell 1y ago
Just rot13 any request data using javascript before posting, and rot13 it again on the server side. Problem solved. (jk)
114.
by mike-cardwell 2y ago
> 2.5B * $.1/1000 = $250K/yr Lets Encrypt doesn't send an email for every certificate that expires. > especially if you let it expire All certificates expire.
115.
by mike-cardwell 2y ago
> No one in this thread used the word "stealing" before you It's right there in the comment he was responding to
116.
by mike-cardwell 2y ago
I could see how somebody might think that, if they ignore the content of what was said and only look at the presentation.
117.
by mike-cardwell 2y ago
I couldn't even watch the whole video. Horrendous. Depressing. How can you tolerate having those men running your country America. Nightmare fuel.
118.
Proton Mail Says It's "Politically Neutral" While Praising Republican Party(theintercept.com)
20 points by mike-cardwell 2y ago|5 comments
119.
by mike-cardwell 2y ago
I have some smart plugs which I can use to turn things on/off from Home Assistant, but more usefully, they report current power draw. I use this with Home Assistant to: - Turn on my electric blanket from my watch 10 minutes before I go
120.
by mike-cardwell 2y ago
As the other guy said, that's why I mentioned using an ID. And as the other guy said, the same as required regardless of what channel you're using.

More ›