Terence Eden. He has a beard and is smiling.

Terence Eden’s Blog

Theme Switcher:

Disable JavaScript on Specific Sites using Firefox for Android and uBlock Origin

· 1 comment · 200 words · Viewed ~378 times


The my rules sub-page.

Sometimes, you want to stop scripts running only on specific domains. The best way to do that, I think, is with uBlock Origin - a free and fast ad-blocker. On the desktop version, it's simple to block scripts. Click the plugin icon, then click the disable scripts button. But on mobile it's a little more complicated. Here's how to do it on the Android version of Firefox. Install Firefox. Then …

DMCA as a vector for pornographic spam?

· 7 comments · 300 words · Viewed ~537 times


To: Webmaster of https://shkspr.mobi/, Google has been notified, according to the terms of the Digital Millennium Copyright Act (DMCA), that some of the material found on your site allegedly infringes upon the copyrights of others. We’re in the process of removing the allegedly unlawful materials from Google Search results. The notice that we received, with any personally identifying information removed, may be found on the website of Lumen, a third-party aggregator of legal complaint notices, at https://lumendatabase.org/notices/42788513.

There's a law in the USA called the DMCA - Digital Millennium Copyright Act. Amongst its myriad provisions is the ability for copyright holders to send takedown notices to service providers. If someone has ripped off your content, you can send them a legal letter saying "take that down". People often send DMCA requests to Google saying "this site has stolen my copyrighted content - please remove …

An end to daily blogging

· 13 comments · 250 words · Viewed ~265 times


Screenshot of a calendar of my daily blogging.

If you explore this blog's archives, you'll see that I've been blogging continuously every day since the start of 2020. Before that, I was blogging every month since mid-2008. Today, I am very hungover. Although I usually write a bunch of posts a few days and weeks in advance, I find myself looking at my publishing calendar and seeing it blissfully empty. Part of the reason I blog is that I…

Can time-travellers use TOTP codes?

· 4 comments · 350 words · Viewed ~360 times


A chunky wristwatch showing the time and a selection of 6 digit codes and their corresponding entities.

Imagine, just for a moment, you and your friends decide to travel in time. In order to make sure you can authenticate your communications with each other, you set up a shared Time-based One Time Password (TOTP). The TOTP algorithm uses a Hash-based Message Authentication Code (HMAC). The hash is calculated from a shared key and a time-based component. The key is a short string of characters.…

We've received a letter about you

· 1 comment · 300 words · Viewed ~435 times


Royal coat of arms of the UK. A lion and a unicorn.

This is a retropost. It was written in July 2021, but published after I had left the Civil Service. An MP has written to the Chancellor of the Duchy of Lancaster asking about some work our department is doing. This is all rather usual for Government business. In the letter, the MP mentions me. By name. This is decidedly unusual! Civil Servants at my level are anonymous, interchangeable cogs…

How random are TOTP codes?

· 5 comments · 350 words · Viewed ~8,028 times


Histogram of distributions. 8 is clearly higher than the rest.

I'm pretty sure that the 2FA codes generated by my bank's TOTP app have a bias towards the number 8 - because eight is an auspicious number. But is that just my stupid meaty brain noticing patterns where none exist? The TOTP algorithm uses HMAC, which in turn uses SHA-1. My aforementioned brain is not clever enough to understand how that works. Although bigger, meatier brains have assured me it …

Password Resets in an Age of MFA

· 3 comments · 100 words · Viewed ~338 times


A padlock engraved into a circuit board.

Recently, WordPress got in contact with me to say they suspect that my password was exposed in some sort of data breach. Well, it's a day ending with a "y" - so of course some scumbag has pilfered my digital identity. WordPress mandated that I change my password. But was that really necessary? Firstly, the password was uniquely generated by my password manager. It isn't re-used anywhere else.…

The complexity is the attraction - reflections on trying to use crypto

· 19 comments · 600 words · Viewed ~594 times


A fiver and some coins on a table.

A few weeks ago, someone wanted to send me some crypto. After spending months studying for a Blockchain exam, I usually avoid such things. But, hey, $20 is $20. So I signed up for a wallet, installed an extension, verified my credentials, saved a seed phrase, and - without too much technical fuss - had some crypto transferred to my account. So far, so good. Compared to a traditional financial…

The Bite

· 2 comments · 400 words · Viewed ~211 times


3D printed jaw with resin scaffolding.

A glistening pool of blood gently wept from the body. Crimson gore sparkled under rapid flash photography as it loosely clung to the wounds. So many wounds. Too many for this to have been an accident. "Bite marks," said the forensics officer. "A lot of bite marks." The detective peered at the ragged corpse. It was barely recognisable as human; just a series of holes where flesh ought to be. …

Review: dbrand skin for FrameWork laptop

· 400 words · Viewed ~337 times


Stickers attacked to the underside of the laptop.

I love putting stickers on my laptops. But when it's time to move to a different laptop, what happens to all those cool stickers? After spending too many nights with a scraper and isopropanol, I decided to get a pre-cut dbrand skin. It'll protect the laptop and it will peel off in one piece, allowing me to preserve all my old stickers. I got the cheapest possible one - it's going to be covered…

The irony of TicketMaster's breach notification email

· 4 comments · 250 words · Viewed ~830 times


What is Ticketmaster doing to protect customers? We have been working with industry-leading cybersecurity experts, the relevant authorities, including law enforcement, as well as credit card companies and banks. No further unauthorised activity has been seen in the cloud database since we began our investigation. We are offering you a free 12-month identity monitoring service with TransUnion. These services will be provided by Cyberscout, a TransUnion company specialising in fraud assistance and remediation services. You can sign up for this service through the following link: https://bit.ly/TU-sign-up What can I do? There is nothing you need to do. However, exposure of personal information can, in some cases, increase the risk of identity theft or fraud, so it’s always a good idea to monitor your bank accounts. If you notice any suspicious activity, contact your bank and/or credit card companies. Be cautious of unsolicited emails from unknown senders, especially those with unusual content, links, attachments, or requests for personal information over the phone. If you have any questions, you can visit https://bit.ly/Ticketmaster-Data-Security-Incident or contact us at ticketmastersupport@ticketmaster.com. Ticketmaster understands the importance of your personal information and we take its protection very seriously. We apologise for having to write to you in these circumstances.

TicketMaster has joined the long list of companies to lose their customers' information. As is common, they sent out an email to warn poor sods like me who might have had our details snaffled. Their email is particularly poor and contains a delightful example of how not to communicate issues like this. See if you can spot it: In the same breath as warning their customers to look out for…

Book Review: Dystopia X - A.E. Currie

· 150 words


Book cover.

Another one in the Panopticon series. Bouncy sci-fi which scattershoots its plots all over the place. VR, Mission to Mars, evil AI, underwater cities, eyeless technomages - this has it all. It probably has a little too much crammed in. But, hey, it's a great ride. A cliffhanger every other chapter, vaguely plausible science, and mortal danger at every turn. It looked like I was about to be part …