Wait, what? 😯
#curl can send email? Damn... @bagder I'm impressed (not that I didn't expected that), curl just keeps on giving. 😁
curl --url "smtp://$SMTP_SERVER:$SMTP_PORT" \
--ssl-reqd \
--mail-from "$SMTP_USER" \
--mail-rcpt "$EMAIL" \
--upload-file "$LOG_FILE" \
--user "$SMTP_USER:$SMTP_PASSWORD" \
--insecure
How I create and maintain RELEASE-NOTES for #curl: live-streamed tomorrow.
It was mostly implied from my how I do releases video, so I figured I could show a little more from how the sausage is actually made.
Should be a fairly brief one. At 10:00 CET tomorrow Friday over at twitch.tv/curlhacker as usual.
I'm Daniel Stenberg, maintainer and lead developer in the curl project. I stream curl related stuff. Release presentations, curl development and related topics.Twitch
As amusing as it is, the pillow quote is not correct though. #curl is my full-time gig since over six years now.
This is what I do: daniel.haxx.se/job.html
Documentation and ramblings of Daniel Stenberg, founder and lead developer of curl.daniel.haxx.se
For educational purposes we disclose this recent hackerone report on #curl claiming its sprintf() implementation is bad because it can be made to deref a bad pointer when you use it incorrectly. You know, exactly how all sprintf() implementation work - by design.
This is not the first time we had this "flaw" reported. (I did not check the "AI slop" checkbox on this one)
## Summary: A vulnerability has been identified in the curl library’s formatted output functions (specifically in curl_msnprintf and its related functions). When a malicious (attacker-controlled)...HackerOne
Two years ago we ended #curl series seven with a final release: 7.88.1
daniel.haxx.se/blog/2023/02/20…
Surely nobody is still rocking version 7? 😀
Things did not work out the way we had planned. The 7.88.0 release that was supposed to be the last curl version 7 release contained a nasty bug that made us decide that we better ship an update once that is fixed. This is the update.daniel.haxx.se
Changing every line three times
daniel.haxx.se/blog/2025/02/18…
Is there some magic making three times, or even pi, the number of times you need to write code for it to be good?
#curl
Is there some magic making three times, or even pi, the number of times you need to write code for it to be good? So what am I talking about? Let's rewind and start with talking about writing code.daniel.haxx.se
2025-02-18
#curl surpassed 3.5 added lines of code per line of code still there, for the first time ever: we keep polishing.
3.500749 to be exact 😁
Let me explain the #OpenSSL #QUIC API move and what it might mean. For #curl and for others.
daniel.haxx.se/blog/2025/02/16…
But will it satisfy the world? I have blogged several times in the past about how OpenSSL decided to not ship the API for QUIC a long time ago, even though the entire HTTP world was hoping for it - or even expecting it.daniel.haxx.se
Two documentation edits related to the following documentation pages: CURLOPT_SSL_ENABLE_NPN Issue: The use of a full-stop breaks the redirection when rendered on a webpage Action: Removed the fu...GitHub
The Gemini protocol is a lightweight alternative to HTTP positioned as a spiritual successor to Gopher. One drawback is that without reuse of TCP connections, every navigation takes several seconds on geostationary satellite Internet.
Read what curl maintainer Daniel Stenberg (@bagder) thinks of Gemini
daniel.haxx.se/blog/2023/05/28…
#GeminiProtocol #satellite #Gemini #curl
There is again a pull-request submitted to the curl project to bring support for the Gemini protocol. It seems like a worthwhile effort that I support, even if it is also a lot of work involved and it might take some time before it reaches the state …daniel.haxx.se
I will talk #curl in Stockholm on May 22 at the Open Infra Forum.
Sign up here:
meetup.com/openstack-user-grou…
Hej allihopa! Goda nyheter! Open Infra Forum firar 10 år, så den här gången slår vi på stort! Varmt välkomna till Biograf Skandia på Drottningatan 82 ochMeetup
A patch release just eight days since the previous release, due to a number of regressions in 8.12.0.YouTube
I'm Daniel Stenberg, maintainer and lead developer in the curl project. I stream curl related stuff. Release presentations, curl development and related topics.Twitch
Ok, not a lot to brag about here except a whole range of bugfixes, but I performed the #curl release dance again.
See you at 10:00 CET on the live-stream.
daniel.haxx.se/blog/2025/02/13…
This is a quick follow-up patch release due to the number of ugly regressions in the 8.12.0 release. Release presentation Live-streamed on twitch as always at 10:00 CET on the release day.daniel.haxx.se
Thanks @bagder for providing the Firefox ca bundle publicly in an accessible way here: curl.se/docs/caextract.html
Extra kudos for the appropriate curl command-line to automatically download the latest version!
#curl
🆕 blog! “A small contribution to curl”
The venerable curl is one of the most fundamental pieces of code in the modern world. A seemingly simply utility - it enables other programs to interact with URls - it runs on millions of cars, is inside nearly every TV, used by billions of people, and is even in use on Mars.
And, as of last week, features a small contribution by…
👀 Read more: shkspr.mobi/blog/2025/02/a-sma…
⸻
#curl #documentation #OpenSource
The venerable curl is one of the most fundamental pieces of code in the modern world. A seemingly simply utility - it enables other programs to interact with URls - it runs on millions of cars, is inside nearly every TV, used by billions of people, a…Terence Eden’s Blog
The README currently says: SSL verification setup: $curl = new Curl\Curl(); $curl->setOpt(CURLOPT_RETURNTRANSFER, TRUE); $curl->setOpt(CURLOPT_SSL_VERIFYPEER, FALSE); $curl->get('https://encrypted....GitHub
Hi friends, Due to a range of bad regressions in the curl 8.12.0 release, we are working on getting a patch release out. curl 8.12.1 ships on February 13 and contains a set of bugfixes. I'm sorry f...GitHub
#curl has supported rustls for four years already, still experimental:
daniel.haxx.se/blog/2021/02/09…
curl is an internet transfer engine. A rather modular one too. Parts of curl's functionality is provided by selectable alternative implementations that we call backends.daniel.haxx.se
Fixes #16269 - replaces .site domains and domain.com with valid example domains. There may be other invalid examples, but these were the obvious ones I could find. Please let me know if there are a...GitHub
"Tightening every bolt" my talk about #curl security at FOSDEM 2025, on video:
video.fosdem.org/2025/ub4132/f…
Also on YouTube: youtu.be/Yr5fPxZvhOw
Things to do in order to sleep well while having your C code in twenty billion installations. A talk about what the curl project does to minimize security ri...YouTube
Thanks to amazing work by @icing and friends, we nailed it. 26 hours from #curl crash report to confirmed fix.
github.com/curl/curl/issues/16…
I did this I updated my system and got curl 8.12.0, that caused a segfault in kodi when it tried to do https requests somewhere. Rebuild kodi for testing against curl 8.12.0 but that did not change...GitHub
And here's yesterday's AI slop security report in #curl. This might not be immediately obvious to the untrained eye;
Title: Potential Use-After-Free Vulnerability in cf_h2_proxy_ctx_free Function of libcurl Vulnerability Overview: A potential Use-After-Free (UAF) vulnerability has been identified in the...HackerOne
## Summary: The fix for CVE-2024-11053 seems to be incomplete.The information leak problem could be reproduced again if use netrc in step1. ## Affected version all ## Steps To Reproduce: 1....HackerOne
It's been a year since "you too could have made #curl"
daniel.haxx.se/blog/2024/02/06…
https://www.youtube.com/watch?v=kCJmAyUr1j4 This is the video recording of my talk with this title, done at February 4, 2024 10:00 in the K1.105 room at FOSDEM 2024.daniel.haxx.se
Daniel makes the curl 8.12.0 release. Shows how a curl release is done. This is the 264th curl release. Shows the scripts, the procedures and the general pro...YouTube
The #curl 8.12.0 presentation
Daniel describes the three new CVEs, the eight changes and some thirty of the bugfixes done in curl 8.12.0 released on February 5, 2025.YouTube
#curl 8.12.0
daniel.haxx.se/blog/2025/02/05…
Release presentation The live-streamed release video presentation happens on February 5 2025 at 09:00 UTC on twitch.daniel.haxx.se
