@bagder@mastodon.social
·
3d ago
Later this week #GitHub introduces a way to limit how many pull requests users without write access can have open at one time... As a way to combat heaps of low-quality PRs.
I'll start out trying with this set to 2 for #curl.
49
0
26
@bagder@mastodon.social
·
3d ago
The #curl project will not accept or otherwise handle any vulnerability reports during the month of July 2026. We call it the curl summer of bliss.
https://daniel.haxx.se/blog/2026/06/15/curl-summer-of-bliss/
745
90
446
: :
: :
:
@bagder@mastodon.social
·
Jun 03, 2026
We have plenty of #curl talks, explainers and deep-dives collected on the curl site.
https://curl.se/docs/videos/
12
0
9
@bagder@mastodon.social
·
May 22, 2026
not even half-way through this #curl release cycle we are already at 11 confirmed vulnerabilities - and there are three left in the queue to assess and new reports keep arriving at a pace of more than one/day
11 CVEs announced in a single release is our record from 2016 after the first-ever security audit (by Cure 53).
67
11
34
@bagder@mastodon.social
·
May 05, 2026
Function sizes in #curl over time. My vision is to take the largest down below 500 lines and to keep it there.
111
5
51
@bagder@mastodon.social
·
May 04, 2026
On this day ten years ago, #curl was ranked the 73rd most "risky" open source project by the Linux Foundation.
https://daniel.haxx.se/blog/2016/05/04/no-more-heartbleeds-please/
25
2
3
@bagder@mastodon.social
·
Apr 29, 2026
I feel honored to present to you: #curl 8.20.0
https://daniel.haxx.se/blog/2026/04/29/curl-8-20-0/
99
6
67
@bagder@mastodon.social
·
Apr 28, 2026
I spoke about the Open Source AI Reality at #fossnorth this morning. Awesome crowd. Excellent questions. (video pending)
Now going back home to do a #curl release tomorrow.
76
4
19
@icing@chaos.social
·
Apr 24, 2026
Stefan Eissing
@icing@chaos.social
curl maintainer, protocol droid, likes to code. "Nobody has any idea what is actually going on."
chaos.social
299
16
131
@icing@chaos.social
·
Apr 24, 2026
Stefan Eissing
@icing@chaos.social
curl maintainer, protocol droid, likes to code. "Nobody has any idea what is actually going on."
chaos.social
32
1
13
@icing@chaos.social
·
Apr 18, 2026
Stefan Eissing
@icing@chaos.social
curl maintainer, protocol droid, likes to code. "Nobody has any idea what is actually going on."
chaos.social
AIs have been finding bugs and vulnerabilities in #curl for some time.
Is it work to fix those? Yes.
Has someone paid for this? Partially (wolfSSL and @sovtechfund@mastodon.social)
Are the AIs annoying? Yes, very.
Could humans find the same bugs? Yes, if they‘d somehow avoid being bored to death through it.
Was there something „heartbleed“ like? No.
Were there lots of C mistakes? No, logic bugs mostly.
Do AIs run out of steam? Yes. After a while a model stops finding things. Findings differ per model.
143
7
115
@bagder@mastodon.social
·
Apr 17, 2026
After just having responded to the third #curl security report for the evening I noticed a post that cheered me up...
Have a good Friday everyone!
https://www.linkedin.com/posts/moekatib_millions-of-people-look-up-to-steve-jobs-activity-7450947453085749248-K1w-
2164
45
1021
@bagder@mastodon.social
·
Apr 15, 2026
Six years ago #Firefox announced they followed Chrome and removed FTP. #curl did not. Still hasn't.
https://daniel.haxx.se/blog/2020/04/15/curl-is-not-removing-ftp/
135
5
57
@bagder@mastodon.social
·
Apr 13, 2026
Finally: Doom played over #curl
https://github.com/xsawyerx/curl-doom
305
12
185
@bagder__dup_3144@mastodon.social
·
Mar 15, 2026
daniel:// stenberg://
@bagder__dup_3144@mastodon.social
I write curl. I don't know anything.
mastodon.social
Some of you will be glad to know that the #curl dashboard now features the "graphs in the dashboard" graph
https://curl.se/dashboard1.html#graphs-on-the-dashboard
109
8
52
@bagder__dup_3144@mastodon.social
·
Mar 02, 2026
daniel:// stenberg://
@bagder__dup_3144@mastodon.social
I write curl. I don't know anything.
mastodon.social
Three years ago I blogged about #nuget serving outdated #curl packages.
They then removed the packages I found.
I checked nuget again today and immediately found a nine year old curl package that is downloaded at the rate of 1,000 times/week from there… with 64 known vulnerabilities.
The blog post from back then: https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/
152
9
122
@bagder__dup_3144@mastodon.social
·
Mar 01, 2026
daniel:// stenberg://
@bagder__dup_3144@mastodon.social
I write curl. I don't know anything.
mastodon.social
IRC made me do #curl
https://youtu.be/ohzzGy5K9Dk
134
12
74
@bagder__dup_3144@mastodon.social
·
Feb 25, 2026
daniel:// stenberg://
@bagder__dup_3144@mastodon.social
I write curl. I don't know anything.
mastodon.social
This year counts as #curl 30 years, counting from the first httpget 0.1 release in November 1996.
I'm thinking we could fly a special logo for the occasion on the #curl front page throughout the year.
Maybe *you* can make one that looks festive and still confident and trustworthy?
To trigger some thoughts, here's my take:
73
16
57
@bagder__dup_3144@mastodon.social
·
Feb 23, 2026
daniel:// stenberg://
@bagder__dup_3144@mastodon.social
I write curl. I don't know anything.
mastodon.social
The #curl project is soon going to move away from GitHub again for its security reporting. It simply doesn't work the way we need it to. Proper announcement will follow in the near future.
285
4
131