The Curious Engineer

All blogs / Security

grepular.com

grepular.com

Mike Love's blog on Linux, security, and privacy — tutorials, analysis, and tools

SecurityLinux / UnixNetworking

Posts
138 from 28 Mar 2009 to 4 Oct 2026
Posting
monthly (15 in the last year)
Kind
personal blog
Feed
https://www.grepular.com/atom

2026 15

  1. GKG Net Bad Domain Registrar
  2. Tech Blog
  3. Hardening Container Images
  4. Evolution Mail Users Easily Trackable Part 3, One Year On
  5. Sanitising Email
  6. Notifications on Calendar Changes
  7. Auth Proxy Injection for LLMs
  8. Development AI vs Runtime AI
  9. Protecting Your Host from Malicious Dependencies
  10. Stadia Maps Privacy Fail
  11. Cert Authorities Check for DNSSEC From Today
  12. Website Testing on Steroids
  13. ParseMail
  14. New Website, New Technology
  15. Apple's "Protect Mail Activity" Doesn't Work

2025 5

  1. Immortal SSH Sessions
  2. Fun with Gzip Bombs and Email Clients
  3. Evolution Mail Users Easily Trackable Part 2
  4. Evolution Mail Users Easily Trackable
  5. Blocking Russian IPs

2024 1

  1. Sending Email Using Curl

2023 1

  1. Skiff.com Email's Various Privacy Failures

2021 1

  1. Self Building and Executing Dockerfiles

2020 2

  1. Sandbox Rust Development with Rust Analyzer
  2. Manage Firewall from Dockerised NodeJS

2019 1

  1. Nginx Restic Backend

2018 1

  1. Twitter to RSS with Google Cloud Function

2017 7

  1. GPG Agent Forwarding
  2. Keybase Browser Extension Insecure
  3. Monitoring Expiry of GPG Keys
  4. Email Authentication Failure
  5. Lavabit Security Misconfiguration
  6. Investigating a JavaScript/React Performance Issue
  7. Private Location Tracking/Sharing

2016 3

  1. When Backup MXs Are Ignored
  2. The Sad State of HTML Email Input Fields and IDNs
  3. DNSCrypt Reduces Privacy

2015 3

  1. MeteorJS Sorting Troubles
  2. An NFC PGP SmartCard For Android
  3. Perfectly Private Android Networking (Almost)

2014 4

  1. Exploiting External Entities in RSS Feed Readers
  2. DNS Validation of Email Addresses in Perl
  3. GPGIT Broken by Breaking Change in GnuPG::Interface
  4. Security Bug in Thunderbird - Open Websites in Tabs

2013 3

  1. Transparent Access to Tor Hidden Services
  2. Transparent Access to I2P eepSites
  3. Disk Caching with SSDs on Linux and Windows

2012 7

  1. FastMail.FM Security Vulnerabilities
  2. Protecting Your GNU/Linux System from Dropbox
  3. New Version of The Email Privacy Tester
  4. Android Privacy Guard and Subkeys
  5. Smart Cards and SSH Authentication
  6. Punching through The Great Firewall of T-Mobile
  7. Extended Life Phone Batteries

2011 26

  1. Secure, Free, Incremental and Instant Backups for Linux
  2. TextSecure and the inPulse SmartWatch
  3. Understanding DNSSEC
  4. Defending Against Spear Phishing with Exim
  5. Toughening up RequestPolicy
  6. Solving the SSL CA Debacle Using Multi-Signed Certs
  7. Protecting a Laptop from Simple and Sophisticated Attacks
  8. Preventing Web Tracking via the Browser Cache
  9. Mozilla Security Bug Reveals Web Proxy Credentials
  10. Protecting PGP Smartcards from Observation Attacks
  11. View-Source URIs and RequestPolicy Bypass
  12. FireGPG on Firefox 5
  13. Boxee.TV Helps Its Self To Your Viewing Habits
  14. 2011 EU Cookie Legislation - Opinion of a UK Web Developer
  15. Microsoft Exchange Private Appointments Aren't Private
  16. Android Application Firewall: DroidWall
  17. Dropbox Mobile: Less Secure Than Dropbox Desktop
  18. Advertise Your Wifi in Your Customers' Kik Messages
  19. LastPass Vulnerability Exposes Account Details
  20. Bypassing "RequestPolicy" Using Protocol Relative URLs
  21. Automatically Encrypting all Incoming Email, Part 2
  22. Case Study: Multiple Convore Security/Privacy Problems
  23. When Third Party Email Providers Leak
  24. Abusing HTTP Status Codes to Expose Private Information
  25. Using Linux to Monitor Room Temperature Remotely and Cheaply
  26. Automatically Encrypting all Incoming Email

2010 27

  1. New Year Bug in At Command
  2. Publishing PGP Keys in the DNS
  3. Using HTTPS Everywhere from Perl
  4. Kik Messenger Insecure
  5. Why Does this Website Generate SSL Warnings?
  6. Why no Firesheep for IM?
  7. Tor Circuits with Two Hops on Ubuntu
  8. Scalable Vector Graphics and XSS
  9. iOS 4 iPhone Email Privacy Leak
  10. Changing from GoogleMail to GMail Killed My Phones Battery Life
  11. Setting up IPv6 is Easier Than You Think
  12. Getting The Search Term From Clicks From Google SSL
  13. DuckDuckGo Searches Are Not Anonymous
  14. Making BitTorrent Safe to Use Over Tor
  15. Exim Trick to Extract Received Header IP Addresses
  16. Extract Domains from Email Using Exim
  17. DNSSEC Will Kill Commercial CAs
  18. Use Random Passwords Which You Can't Remember
  19. Secure URL Redirects using Apache, ModRewrite and ModSecurity
  20. Blocking Comment Spam Using ModSecurity and Hidden Fields
  21. Automated Email Privacy Tester
  22. How to Reliably Crash the iPhone's E-mail Client
  23. Android Email Information Leak
  24. ClickJacking and SSL Protection in Apache
  25. Android Battery Graphing Source Code
  26. DNS Pre-fetch Exposure on Thunderbird and Webmail
  27. SpamAssassin 2010 Bug

2009 30

  1. JSAPI Incompatible with XSLT
  2. Debenhams Fails at Sending Email
  3. JavaScript Comma Quirk
  4. Apache Forward Proxying with Compression
  5. Compressing JavaScript on the Fly
  6. Poundhost vs RapidSwitch vs GameServersDirect vs FPSGame
  7. Compressing CSS on the Fly
  8. Android Email Sucks
  9. Gumtree Rental Fraud
  10. Monitor Your Website Automatically From Cron
  11. Apple Mail Privacy Hole
  12. Your Email Address Isn't Safe
  13. BBC Wrong About Mobile Broadband Speeds
  14. Poundhost vs RapidSwitch
  15. Poundhost Data Storage
  16. Trusting Replies to Trusted Email Messages
  17. Redirecting Pages through CGIProxy with Squid
  18. Detecting Bad ClamAV Signatures by Scanning Ham
  19. Automatically Expiring Email Addresses
  20. Accessing Memcached from Exim
  21. Whitelist Recipients in Exim
  22. 3G Network Latency Comparison
  23. Exim Client Authentication Recipe
  24. CommuniGate Pro Contact Folders as a Whitelist Source for Exim
  25. Accessing Rejected Spam Solution
  26. Cross Browser Compatible XSLT
  27. Livejournal opt-out of Phorm
  28. Mitigating Spear Phishing
  29. Google Phone Battery Usage Graphing
  30. Phorm - Webwise

Undated 1

  1. experienced