Post #4131055

2026-07-27 06:39 UTC

After almost 4 weeks of #curl #summerofbliss I still do not miss security reports. When we stopped listening, there was instant relief - that kept up. I‘d imagine that’s what having left a years long, abusive relationship feels like. It‘ll last another week. And then…we‘ll move in again? Doesn‘t that sound insane?

Replies (5)

@ondrejkolin@mastodon.social 2026-07-27 06:42

@icing@chaos.social People (and companies mostly) will use the paid support channels of course - they learned their lesson, that guarantees are normal to pay for. #daydreaming

Open ##4316198
@Di4na@hachyderm.io 2026-07-27 06:44

@icing@chaos.social as I keep pointing out, security report are mostly useless noise to 99% of maintainers. Too low in the list of priorities to be important. Curl is in a particular spot, that you have enough ressources to be able to get to them. I think the urgency of them only depends on what you assign to them

Open ##4316200
@tbaldauf@social.tchncs.de 2026-07-27 07:55

@icing@chaos.social An abusive relationship, even after you left it, gets you to question yourself, what might be wrong WITH YOURSELF and how you could have made it work if you had done this-or-that differently. Therapy then hopefully teaches you that flaying yourself like that is about perceived control of an uncontrollable system. But I can imagine that mechanism of guilt to not handle things faster / better and not feeling adequate might be true about cURL security reports, too. Good thing you're executing self-care. <3

Open ##4316204
@bentsukun@mastodon.bsd.cafe 2026-07-27 11:24

@icing@chaos.social If this was a commercial operation, I would say that your security rotation is severely understaffed. Six people minimum, with regularly scheduled shifts.

Open ##4316205
@RichiH@chaos.social 2026-07-27 11:42

@icing@chaos.social did the split into still supporting paid customers lead to an increase in paying customers? CC @bagder@mastodon.social

Open ##4316206