Elektrine lite

← Feed

daniel:// stenberg://

bagder@mastodon.social

<p>I write curl. I don&#39;t know anything.</p>

Posts

  • View post

    &quot;Google freezes open-source bug bounty program amid flood of invalid AI slop submissions&quot; https://www.tomshardware.com/tech-industry/artificial-intelligence/google-suspends-part-of-the-oss-vrp-bug-bounty-program-due-to-an-influx-of-invalid-ai-submissions-product-vulnerability-submissions-ended-october-1

  • View post

    my week: https://lists.haxx.se/pipermail/daniel/2026-September/000169.html 25 years, security, performance, Rock-solid, Development, rc2, stickers

  • View post

    Organisation curl Job title internet janitor Attending Social: No Filling in the registration form for a conference talk I&#39;ll do in a few weeks.

  • View post

    because obviously on Windows &quot;CON[superscript 1]&quot; is also a reserved file name... *sigh* And yeah, you can write that either with ISO8859-1 *or* UTF-8 ... You couldn&#39;t even make these things up if you tried.

  • View post

    The Russian drone that crashed in Lithuania the other day had curl installed. As part of a default Linux install presumably, it seems unlikely it used curl for any &quot;drony&quot; things.

  • View post

    None of the Flock camera teardowns seems to specifically list curl as part of those software stacks, but as they run fairly stock Android installs it is likely that they too run curl.

  • View post

    &quot;for months on end now, most of our teams have just been triaging bugs and coordinating releases. It has truly taken all the fun out of the job&quot; https://blog.nlnetlabs.nl/maintaining-the-love-for-coding-in-the-time-of-ai/

  • View post

    Weird AI :video about curl that is still mostly accurate: https://youtu.be/qZHGxmV4MJU?is=PTTxfjlOuEkXyQg2

  • View post

    As of two minutes ago, #curl does no longer support SMB. 🎉

  • View post

    Getting invited to join an organization that has a 3,000 USD &quot;invitation fee&quot; and in-person-only events only in the US. No thanks.

  • View post

    Updated chart showing the share of #curl vulnerabilities caused by &quot;C mistakes&quot; as a share of all the vulns we know existed in code over time.

  • View post

    &quot;five months into Project Glasswing, only 9.8% of the findings have made it to a project maintainer&quot; https://www.vulncheck.com/blog/anthropic-glasswing-receipts

  • View post

    Average number of hours between each #curl vulnerability report, since March 1 2026 (excluding July as we closed during that month): 16.2 During 2025 the average interval was 48 hours ...

  • View post

    #curl surpassed 16,000 closed PRs

  • View post

    As the #FOSDEM 2027 weekend is confirmed, It might be time to check out my FOSDEM guide and help me polish it further: https://github.com/bagder/FOSDEM

  • View post

    24 hours to #curl release: 10 CVEs, 6 changes, ~300 bugfixes, 85 contributors, 43 authors, 4 new command line options...

  • View post

    Can you believe that NetBSD 6.0.X shipped (in 2013) with broken non-blocking sockets and of course someone managed to run a modern libcurl on that and... yeps, got into trouble.

  • View post

    Pokopia black screen cant login #inbox https://daniel.haxx.se/email/2026-08-30.html

  • View post

    So tell me. Do you think #curl should support plain SSH:// URLs to execute commands remotely? https://github.com/curl/curl/pull/22661

  • View post

    A palindrome URL for your localhost. curl &#39;http :// 2130706433:80#08:3346070312//:ptth&#39;

  • View post

    &quot;So are you developing anything these days or are you mostly maintaining what is already there?&quot; Oh my sweet innocent child...

  • View post

    Heads up! In #curl 8.23.0 (end of October 2026) SMB(S) support will be gone. https://github.com/curl/curl/pull/22652

  • View post

    It&#39;s now 10 whole years since I tried to do my duty for the community and remove the #curl alias from PowerShell. It&#39;s still there. https://daniel.haxx.se/blog/2016/08/19/removing-the-powershell-curl-alias/

  • View post

    (I replied:) &gt; *What are you willing to pay for someone to take care of the Windows side?* We get exactly zero dollars for our windows version of curl and you&#39;re welcome to get a share of this revenue!

  • View post

    #curl can download a single transfer HTTP/1.1 (clear-text) 100G file from localhost at 5674473589 bytes/sec on my machine. That&#39;s a lot of bytes every second.

  • View post

    No one in the seven-person curl security team is on or runs Windows. People sending us Windows-only flaws makes us groan and roll eyes. And sometimes hyperventilate a little. Why this is so? Because no one in the team wants to be on Windows, and no other curl contributor is active enough, Windows-knowledgeable and interested in joining the team. Let me know if you are someone like that who I&#39;ve just not noticed.

  • View post

    Welcome to try out #curl 8.22.0-rc1 https://curl.se/rc/ Thanks for flying curl.

  • View post

    Anyone using HTTP/2 server push with libcurl? If you use this feature in libcurl, please let us know. It is being deprecated all over, including in specs, browsers and servers and I believe the time has come for us to drop it from libcurl in the future as well. So I&#39;m curious to know if anyone actually (still) uses it.

  • View post

    I&#39;m sorry but I&#39;m not going to speak at NDC Techdown 2026 in September as previously planned.

  • View post

    My guide on **how to invite me to do a talk**: https://daniel.haxx.se/how-to-invite-me.html