Ctrl blog

Superfeedr sends logins in plain-text (a HSTS case study)

Superfeedr tried securing its website with HTTPS and HSTS, but failed to apply it correctly. User emails and credentials are sent in plain-text on the first login.

Google FeedBurner (the RSS enhancer and analytics suite) hasn’t received much attention in the last decade. Google now deprecates feed-to-email and more features.

The thing about The Thing About Harry

A cute and positive LGBT romance movie is a rare treat! Unfortunately, The Thing About Harry isn’t available to international audiences outside the U.S.

Lower the paywalls to keep the bullshit at bay

It doesn’t matter if great information exists if no one can access it. “The Truth is Paywalled; but the Lies are Free.” Can micro-payments save news and the web?

What is the best file format for web shortcuts

You can store links on your file system in .URL, .LNK, .WebLoc, .Desktop, and .HTML files. But which is the best format fr your bookmark files?

Third-party extension not enough to address Coil’s transparency issues

PayTracker keeps a record of Web Monetization micro-payments made through Coil, but the extension alone isn’t enough to fix Coil’s transaction transparency issue.

GNU Parallel can do anything, but scripting may be the better option

GNU Parallel is a powerful Linux parallelization tool for local and remote jobs. Its unique command syntax and complex requirements makes it difficult to use.

Set Store apps as the default for arbitrary file types in Windows 10

Here’s how to make Windows File Explorer open arbitrary files types in apps installed from the Microsoft Store. Includes common troubleshooting steps.

Kitty Letter word-scrambled my brain

Who knew an enchanted letter vortex could cause you trouble falling asleep? How a mobile game engraved a repeating pattern into my brain.

Get Meltdown Alert notifications for PlanetSide 2

Receive browser notifications at the beginning of Meltdown Alert events on your server in PlanetSide 2! Join the fight on Auraxis!

The Jellyfin media server can enrich your media collection with metadata from online sources. The price may be free, but the cost is metadata for metadata.

Why I uninstalled Plex Media Server after over a decade and migrated my movie and TV show collection to Jellyfin instead of Emby.

Be wary of file sync conflicts with KeePass apps on Android

An investigation and comparison into how KeePass-compatible password manager apps for Android handle external changes to an unlocked password vault database.

Forcing the user to choosing a username is a terrible user experience. No one wants to use an online service that forces a name you don’t like.

Don’t be shady, deploy your JavaScript source maps

Source code minification is beneficial, but the resulting obfuscation reduces trust and transparency. Source maps can help restore these and let people learn.

The built-in Windows 10 web browser you’ve never heard about

Windows 10 has a built-in program called Internet Browser (not to be confused with Internet Explorer) that helps you open link files in your preferred web browser.

systemd application firewalls by example

Restrict Linux services’ network traffic with per-service systemd firewall rules.

Don’t use RouterOS DHCP lease scripts to manage DNS

MikroTik’s DHCP lease scripts don’t execute on DHCP renewals, causing issues with DNS registrations when devices suspend and rejoin the network later.

Help Mozilla build out its Location Service by taking a walk

Update (2021-04-21): The Mozilla Strumbler app has been discontinued. The app is no longer available for download. The Mozilla Location Service isn’t being discontinued, but its accuracy will probably decrease over time without new data submissions from the community.

How to get to the Microsoft Feed in your web browser

Update (2021-04-21): The mobile apps are no longer available for download, but the webapp version is still up and running.

How to test if your Bluetooth devices support BLE Privacy

Update (2021-04-21): The BLEScanner app is no longer available on the Play Store. The developer hasn’t responded to my request for a comment.

Update (2021-04-14): Mailbox.org has introduced new higher price tiers. You get more storage, though. The article has been updated to reflect the new pricing and service offering.

Review of Mailbox.org: Email privacy with a thick German accent

Update (2021-04-14): Mailbox.org has introduced new price tiers starting at 3 Euro/month for the same service level, but you get 10 GB of email storage and 5 GB cloud storage. A 1 Euro-plan is still available, but it no longer includes any cloud storage and no support for using your own email domain.

Inconsistent user-experiences with native lazy-loading images

Article updated at 2021-04-07.