Things about stuff. Infosec, tech, life and whatever else comes to keyboard https://fyr.io/ en-gb hello@fyr.io (Matt) fyr.io custom generator https://fyr.io/images/rss-logo.png https://fyr.io/ 2026-04-15 Sometimes, you find a way to abuse a system and you don't get a bounty payout. Such is life! This is what happened here, but... It is a bit different to the usual tale from the world of infosec, because I didn't technically exploit anything, yet still managed to perform account takeovers on well known backup provider Backblaze, including 'accidentally' taking over a legitimate customer account (which contained live, real world data). I merely abused a somewhat poorly constructed instruction in the official documentation which happened to contain a compliant and unregistered domain. I... Guess I exploited the interpretation of the English language? 2026-04-15 https://fyr.io/post/backblaze-account-takeover https://fyr.io/post/backblaze-account-takeover infosec account takever backblaze bugcrowd xxx bug bounty Meow - We got two cats! 2026-04-12 https://fyr.io/post/cat-tax https://fyr.io/post/cat-tax life cats cat tax meow pets You can make honey out of dandelion flowers! I mean, it seems kinda obvious when you think about it but still, I think it's kinda cool 2026-04-12 https://fyr.io/post/dandelion-honey https://fyr.io/post/dandelion-honey life honey dandelion flower homestead Hello RSS feed reader! I see you :) I appreciate you! I've added 'full' feeds, so you can get the entire article (or scrap (or both!)) in your reader instead of having to navigate to the site, or trusting your reader to pull it properly. Neat! Check out the full post for more info! 2026-03-18 https://fyr.io/post/RSS-feed-changes https://fyr.io/post/RSS-feed-changes life RSS RSS for life Why visit a site when the site can visit you?! It's been quiet around here. Here's why, and what's been happening to the human behind the site. 2026-03-14 https://fyr.io/post/absent https://fyr.io/post/absent life burnout tired productivity work energy motivation 32-bit cafe A bunch of scrappy notes from 2025-12-19 to 2026-01-09 2026-01-09 https://fyr.io/scrap/2026-01-09 https://fyr.io/scrap/2026-01-09 scrap indieweb infosec tech A bunch of scrappy notes from 2025-12-01 to 2025-12-19 2025-12-19 https://fyr.io/scrap/2025-12-19 https://fyr.io/scrap/2025-12-19 scrap indieweb infosec tech Mouse going all wacky in Steam-launched games on Pop!_OS 24.04? Fixed (for me at least!) by adding the 60-steam-input.rules file from Valves git repo to /etc/udev/rules.d/ and rebooting! 2025-12-13 https://fyr.io/post/popos-24-spinning-view-in-games-fix https://fyr.io/post/popos-24-spinning-view-in-games-fix tech Pop!_OS 24.04 bug games mouse spinning dishonored A bunch of scrappy notes from 2025-11-24 to 2025-12-01 2025-12-01 https://fyr.io/scrap/2025-12-01 https://fyr.io/scrap/2025-12-01 scrap indieweb infosec tech After a long wait, I finally got a new phone! ...and almost immediately cracked the screen 2025-11-25 https://fyr.io/post/new-phone https://fyr.io/post/new-phone technology pixel 9a phone typical what is my life A bunch of scrappy notes from 2025-11-15 to 2025-11-24 2025-11-24 https://fyr.io/scrap/2025-11-24 https://fyr.io/scrap/2025-11-24 scrap indieweb infosec tech A bunch of scrappy notes from 2025-11-07 to 2025-11-15 2025-11-15 https://fyr.io/scrap/2025-11-15 https://fyr.io/scrap/2025-11-15 scrap indieweb infosec tech No scraps since 2025-08-01 but hopefully I can start regaining some momentum 2025-11-07 https://fyr.io/scrap/2025-11-07 https://fyr.io/scrap/2025-11-07 scrap indieweb infosec tech I've added a live CSS-only (as in, no JavaScript) theme selector to fyr.io 2025-11-03 https://fyr.io/post/new-theme-selector https://fyr.io/post/new-theme-selector website css theme html no-javascript Experiments with emojis and HTML that led to a working HTML/CSS-only method which, whilst awkward, prevents Google's LLM, Gemini, (and others, I guess) from gobbling up website content 2025-10-15 https://fyr.io/post/html-emoji-and-large-language-models https://fyr.io/post/html-emoji-and-large-language-models website foo bar hello world I changed web hosting provider, you may have noticed some... minor issues. I've moved away from Gandi and over to a proper VPS with Hetzner. Feels good! 2025-09-23 https://fyr.io/post/host-change https://fyr.io/post/host-change website gandi hetzner VPS migration August and September are hella-busy so it's been quiet here recently. Hopefully I can swing back to the indieweb and start up some new stuff! 2025-09-23 https://fyr.io/post/the-months-of-contention https://fyr.io/post/the-months-of-contention website august workload time september A bunch of scrappy notes from 2025-07-25 to 2025-08-01 2025-08-01 https://fyr.io/scrap/2025-08-01 https://fyr.io/scrap/2025-08-01 scrap indieweb infosec tech linklog A bunch of scrappy notes from 2025-07-18 to 2025-07-25 2025-07-25 https://fyr.io/scrap/2025-07-25 https://fyr.io/scrap/2025-07-25 scrap indieweb infosec tech We've already harvested (some) blackberries... seems early? 2025-07-21 https://fyr.io/post/early-blackberries https://fyr.io/post/early-blackberries life climate blackberries harvest homestead A bunch of scrappy notes from 2025-07-11 to 2025-07-18 2025-07-18 https://fyr.io/scrap/2025-07-18 https://fyr.io/scrap/2025-07-18 scrap indieweb infosec tech A bunch of scrappy notes from 2025-07-04 to 2025-07-11 2025-07-11 https://fyr.io/scrap/2025-07-11 https://fyr.io/scrap/2025-07-11 scrap indieweb infosec tech A bunch of scrappy notes from 2025-06-27 to 2025-07-04 2025-07-04 https://fyr.io/scrap/2025-07-04 https://fyr.io/scrap/2025-07-04 scrap indieweb infosec tech A bunch of scrappy notes from 2025-06-18 to 2025-06-27 2025-06-27 https://fyr.io/scrap/2025-06-27 https://fyr.io/scrap/2025-06-27 scrap indieweb infosec tech A bunch of scrappy notes from mid May-ish to 2025-06-18 2025-06-18 https://fyr.io/scrap/2025-06-18 https://fyr.io/scrap/2025-06-18 scrap indieweb infosec tech Our first chicken egg arrived yesterday 2025-05-27 https://fyr.io/post/a-most-eggsellent-adventure https://fyr.io/post/a-most-eggsellent-adventure life chicken egg food flock b'kawk Unburden yourself from e-frustration, e-anger, or excess e-energy. Tell the universe how you feel by screaming into the void. 2025-05-10 https://fyr.io/post/Aaaaa-sometimes-you-just-wanna-scream-into-the-void https://fyr.io/post/Aaaaa-sometimes-you-just-wanna-scream-into-the-void website Aaa! AAAAA!!!!!! a scream Atera slowly leaked organisations that use their product to mailinator when those customers configured and tested SMTP 2025-05-09 https://fyr.io/post/atera-leaked-their-customers-to-mailinator https://fyr.io/post/atera-leaked-their-customers-to-mailinator infosec data leak infosec atera privacy rmm Our chickens are outside now and they're doing great! 2025-04-16 https://fyr.io/post/spring_chickens https://fyr.io/post/spring_chickens life chickens dirt b'kahk! It's CSS Naked Day 2025 on (and around) the 9th April. No CSS here! 2025-04-08 https://fyr.io/post/CSS_naked_day_2025 https://fyr.io/post/CSS_naked_day_2025 website css accessibility SFW html Blossom trees have burst in pink over the last week or so. Despite pictures doing them no justice at all, here's one for you 2025-03-21 https://fyr.io/post/pink_trees https://fyr.io/post/pink_trees life nature pink tree garden CSS Naked Day 2025 is on April 9th - join in to celebrate and promote healthy web standards 2025-03-07 https://fyr.io/post/CSS_naked_day_2025_is_next_month https://fyr.io/post/CSS_naked_day_2025_is_next_month indieweb CSS CSS Naked Day accessibility web standards Unshackle from the rigidity of the commercial web and be you on the world wild web 2025-02-25 https://fyr.io/post/world_wild_web https://fyr.io/post/world_wild_web indieweb world wild web smallweb indieweb smollweb blog Why did I make an intentionally blank page on this website? 2025-02-20 https://fyr.io/post/intentionally_left_blank https://fyr.io/post/intentionally_left_blank website blank peace calm intentional minimalism page slashpage What's the state of email SPF and DMARC records in UK primary schools? Spoiler: It's... not too great? 2025-02-19 https://fyr.io/post/SPF_and_DMARC_at_primary_schools https://fyr.io/post/SPF_and_DMARC_at_primary_schools infosec email security infosec spf dmarc education scripting school spam We've had a huge workload placed upon our shoulders, but existing methods of organising unplanned and planned work didn't quite scale to something so massive. I needed a new system. This is what I came up with. 2025-02-18 https://fyr.io/post/prioritising_many_projects https://fyr.io/post/prioritising_many_projects life management project kanban eisenhower matrix According to websitecarbon.com, this site is rated as A+ for carbon emission efficiency! Neat. 2025-02-13 https://fyr.io/post/website_carbon https://fyr.io/post/website_carbon website power energy efficiency carbon environment We had to look after 10 three-day-old chicks over the weekend. Initially I wasn't too fussed one way or the other about them... but I think there may be pet chickens in my future 2025-02-10 https://fyr.io/post/chickens https://fyr.io/post/chickens life life chickens chicks The writer of Hamilton - Lin-Manuel Miranda - has something to say about passion projects which really struck me 2025-02-09 https://fyr.io/post/passion_projects https://fyr.io/post/passion_projects life passion inspiration motivation ideas Kids are great. They certainly do invent some interesting concepts... sometimes they happen across an idea which is somewhat mind bending but also entirely cute 2024-10-22 https://fyr.io/post/the_afternoon_of_bedtime https://fyr.io/post/the_afternoon_of_bedtime life bedtime sayings phrases kids I've made a new theme for the site, paper. It's super simple and minimal! 2024-09-09 https://fyr.io/post/theme:_paper https://fyr.io/post/theme:_paper website theme minimalism nightmode I've been thinking about the IndieWeb and the Indie web after reading a great post by @starbreaker. Here are some of my thoughts on the matter 2024-08-28 https://fyr.io/post/indieweb_vs_indie_web https://fyr.io/post/indieweb_vs_indie_web indieweb indie websites elitist blog I had (hardly) any internet on a weekend away and I was forced into the slow lane. It was glorious, I tell you! 2024-08-21 https://fyr.io/post/the_joy_of_the_internet_slow_lane https://fyr.io/post/the_joy_of_the_internet_slow_lane life holiday internet latency calmness The legendary FlamedFury asks what people name their CSS stylesheet in small web projects. This is my answer! 2024-08-15 https://fyr.io/post/post_reply:_css_style https://fyr.io/post/post_reply:_css_style indieweb CSS conventions naming I'm on the fediverse, with all the cool kids! 2024-08-14 https://fyr.io/post/welcome_to_the_fediverse https://fyr.io/post/welcome_to_the_fediverse tech social media fediverse mastodon A reader emailed me some feedback about an issue they noticed when reading the content on this site 2024-08-04 https://fyr.io/post/reader_feedback_on_readability_and_css_hyphens https://fyr.io/post/reader_feedback_on_readability_and_css_hyphens indieweb css readability width After years of trying and saving, we've finally replaced our failing sewage system with a brand new one! Yipee! Now we can get on with stuff. Like growing food! 2024-08-03 https://fyr.io/post/tomatoes_and_anthropomorphising_buildings https://fyr.io/post/tomatoes_and_anthropomorphising_buildings life food growing garden poop Why build an OS when you can build a fake OS that runs in a browser and spend years adding pointless but fun stuff to it for no reaosn other than 'teh lulz'?! 2024-07-26 https://fyr.io/post/windows93_net https://fyr.io/post/windows93_net tech OS browser windows93 Things are keeping me away from this site. Grr. 2024-07-25 https://fyr.io/post/the_month_of_illness https://fyr.io/post/the_month_of_illness life illness productivity crowdstrike Websites can be naked too! 9th April is CSS naked day, where websites wear no clothes! 2024-06-14 https://fyr.io/post/css_naked_day https://fyr.io/post/css_naked_day website css accessibility web standards We've got /now pages, but I wanted a way to archive them. So I have added a /then page! 2024-06-04 https://fyr.io/post/then_pages https://fyr.io/post/then_pages indieweb now then website I've added theme support! 2024-05-21 https://fyr.io/post/themes https://fyr.io/post/themes indieweb themes website css aurora More Aurora! Whoa! 2024-05-11 https://fyr.io/post/aurora_redux https://fyr.io/post/aurora_redux life space spaaaace aurora photography The Aurora was visible and it kinda blew me away a bunch? Here's some crappy pictures :) 2024-05-10 https://fyr.io/post/Aurora https://fyr.io/post/Aurora life space spaaaace aurora photography I saw Jack Baty's nope list and just had to add my own. So I did. But then I realised they were all negative-outlook-esque? And that just won't do. 2024-05-07 https://fyr.io/post/yep_and_nope_pages https://fyr.io/post/yep_and_nope_pages indieweb life positivity negativity be the change I've been playing with h-cards and have incorporated the concept into this site 2024-05-01 https://fyr.io/post/indieweb_h-cards https://fyr.io/post/indieweb_h-cards indieweb html indieweb microformat h-card I've added (back) the RSS feed after migrating off Wordpress and onto this pile of spaghetti code that I call my new website! Yay! 2024-04-26 https://fyr.io/post/rss_for_the_win https://fyr.io/post/rss_for_the_win indieweb rss feed website content I've only gone and scrapped a perfectly functioning website and replaced it with a probably-broken mess of my own facerolling-on-keyboard code that SOMEHOW lets you read this. Don't ask how. Don't look too closely. 2024-04-18 https://fyr.io/post/a_new_website_for_an_old_web https://fyr.io/post/a_new_website_for_an_old_web indieweb website wordpress indieweb smallweb homebrew We have established that Sims.Net sucks. It may, however, be the chosen Suck of your environment. If so, and you need to reset the sysman account password, I got you. 2024-03-03 https://fyr.io/post/reset_sims_net_password https://fyr.io/post/reset_sims_net_password tech sims.net sims sucks password authentication sql A little bug I noticed in Windows Server 2023-11-08 https://fyr.io/post/useless_windows_bug_5462 https://fyr.io/post/useless_windows_bug_5462 tech Windows Server bug gui clock bernards watch Booting a VM and you get the error 'Failed to power on with Error Incorrect Function' after the 2023-10 updates? Yeah, this hit us too. Here's how to fix it 2023-10-18 https://fyr.io/post/vms_not_booting_after_october_2023_windows_updates https://fyr.io/post/vms_not_booting_after_october_2023_windows_updates tech windows windows update bug untested patch virtual machines secure boot Sims.Net sucks. It's an undocumented mess of garbage and confusion. If you need to migrate it to another server, here's how! 2023-10-12 https://fyr.io/post/migrate_sims_net_server https://fyr.io/post/migrate_sims_net_server tech sims.net sims sucks solus database migration software this is hell i hate this so much windows MSSQL I really appreciate well-written implementation guides for server-client software, but what really gets me excited is seeing migration guides. But I hate intentionally paywalling this kind of stuff. Grrrr. 2023-06-30 https://fyr.io/post/implement_but_never_move https://fyr.io/post/implement_but_never_move tech migration documentation software How could you identify where to focus your efforts outside of break-fix work? RachelByTheBay has the answer. 2023-06-19 https://fyr.io/post/duct_tape https://fyr.io/post/duct_tape life duct tape effectiveness workarounds How can you post stuff when you worry about the stuff you post not being good enough? 2023-01-30 https://fyr.io/post/receiving_unsolicited_blogging_advice https://fyr.io/post/receiving_unsolicited_blogging_advice website blogging confidence post moar In my opinion, interruptions are the death of effective technical support and, in particular, project work. Here's how I try to limit it 2023-01-30 https://fyr.io/post/interruptions_in_tech_support https://fyr.io/post/interruptions_in_tech_support life projects interruptions time management Copying and pasting from some random website is dangerous. Lots of people are recommending that you disable JavaScript to protect against this. However, not only does that break almost every website ever, it also doesn't actually prevent the issue. Here's how you can trick someone into running malicious code via copy/paste WITHOUT JavaScript 2022-03-22 https://fyr.io/post/don't_trust_copy_and_paste_even_with_javaScript_disabled https://fyr.io/post/don't_trust_copy_and_paste_even_with_javaScript_disabled infosec javascript malicious copy paste Pretty lights! 2021-12-31 https://fyr.io/post/light-up_spinning_top_in_the_dark https://fyr.io/post/light-up_spinning_top_in_the_dark life lights spinning top photograph One month, three problems. Each special in their own way. Water and nuts are involved. 2021-08-11 https://fyr.io/post/tales_from_tech_support_02_the_server_room_is_nuts https://fyr.io/post/tales_from_tech_support_02_the_server_room_is_nuts life flood server room squirrel tales from tech support have you go the error code b8bb2b3e on an HP Office Jet Pro 8710? Here's how to fix it 2021-07-21 https://fyr.io/post/error_b8bb2b3e_on_hp_office_jet_pro_8710 https://fyr.io/post/error_b8bb2b3e_on_hp_office_jet_pro_8710 tech printer HP Office Jet Pro 8710 b8bb2b3e fix Kaseya done goofed. Sigh. Things won't change 2021-07-14 https://fyr.io/post/kaseya_says_yes https://fyr.io/post/kaseya_says_yes infosec vulnerability kaseya auth bypass 0day There's a visitor information disclosure in WP-Statistics - you should probably upgrade and search your web directory for the leaky file! 2021-07-12 https://fyr.io/post/visitor_information_disclosure_in_wp-statistics https://fyr.io/post/visitor_information_disclosure_in_wp-statistics infosec Wordpress wp-statistics information disclosure Vulnerable versions of GLPI report back to GLPI, who publish that data on their site for some reason? 2021-04-23 https://fyr.io/post/glpi_ripe_for_the_injecting https://fyr.io/post/glpi_ripe_for_the_injecting infosec GLPI vulnerable I love how ice looks when it forms on something smooth and flat like glass 2021-02-08 https://fyr.io/post/iced https://fyr.io/post/iced life ice glass Sometimes kicking the shit out of something that is broken fixes it 2020-07-25 https://fyr.io/post/tales_from_tech_support_01_percussive_maintenance https://fyr.io/post/tales_from_tech_support_01_percussive_maintenance tech pecussive maintenance tales from tech support server kick it As we learned recently, GLPI sucks more than we realised. Let's just ditch it. 2020-07-23 https://fyr.io/post/ditching_glpi https://fyr.io/post/ditching_glpi tech helpdesk GLPI Atera SyncroMSP RMM end user support an email from Have I Been Pwned completely wiped out our GLPI (helpdesk) database through the simplest SQLi ever 2020-05-30 https://fyr.io/post/haveibeenpwned_com_pwned_our_helpdesk_glpi_9_4_5_sql_injection https://fyr.io/post/haveibeenpwned_com_pwned_our_helpdesk_glpi_9_4_5_sql_injection infosec glpi sql injection sqli hibp have i been pwned G Suite Migration for Outlook showing Error 0x8004106b? Here's the reason why - Aliases. Yup. 2020-05-22 https://fyr.io/post/g_suite_migration_for_outlook_error_0x8004106b https://fyr.io/post/g_suite_migration_for_outlook_error_0x8004106b tech google outlook g suite migration email covid is in full swing, this is how we have tried to adapt to it 2020-05-02 https://fyr.io/post/working-with-covid19 https://fyr.io/post/working-with-covid19 life covid lockdown education school work learning work from home An old oak tree on nearby land has died :( 2020-04-30 https://fyr.io/post/dead-wood https://fyr.io/post/dead-wood life nature oak tree hazard test test pls ignore 2019-12-10 https://fyr.io/post/a-leak-here-and-a-leak-there https://fyr.io/post/a-leak-here-and-a-leak-there life shit luck leak car crash crack car trouble it coems in threes, twice Mould has been a huge problem for us in this house as we've not really known much about it, hwoever we've finally made some headway thank to a generous expert giving us some free advice 2019-10-31 https://fyr.io/post/mould https://fyr.io/post/mould life mould condensation insulation Sims.Net sucks - it's slow, it's bad, it's old. But... there is one way to potentially speed it up 2019-09-04 https://fyr.io/post/sims_net_is_slow https://fyr.io/post/sims_net_is_slow tech sims.net SQL MSSQL database fragmentation I like a simple fix, the simpler the better. And what's better than 'turn the tap on'? 2019-07-31 https://fyr.io/post/boiler_high_heat https://fyr.io/post/boiler_high_heat life heat boiler simple fix Here's how to withhold the number on external calls on the Avaya IP Office r5 manager 2019-07-29 https://fyr.io/post/witholding_number_on_external_calls_on_avaya_ip_office_r5_manager https://fyr.io/post/witholding_number_on_external_calls_on_avaya_ip_office_r5_manager tech voip phone avaya withhold avaya ip office r5 manager