Search
Items tagged with: curl
It works! After various modifications on Winsock2 and curl itself, #curl 8.4.0 can run on Windows NT 3.51! 
I will release the source for both of them soon
Why is #curl with #openssl + #nghttp3 still experimental?
github.com/curl/curl/discussio…
Why openssl + nghttp3 is still experimental? · curl curl · Discussion #13820
Why openssl + nghttp3 is still experimental?GitHub
Besides being a freakin' awesome swiss army knife for (any|every)thing network related, this is another reason to love #curl
"curl shall forever remain independent. curl is not part of any umbrella organization, it is not owned or controlled by any company. It makes us entirely independent and free to do what we think is best for the community"
(Source: daniel.haxx.se/blog/2024/05/27…)
Would it be useful if #curl provided a default random variable?
Exploring this little idea here. Good? Bad?
github.com/curl/curl/pull/1381…
curl: offer a default 'random' variable by bagder · Pull Request #13813 · curl/curl
... and two new output functions: uuid and hex The variable holds a 128 bit semi-random value. Output it like {{random:hex}} to get it all as a 32 byte hex sequuence {{random:uuid}} shows it as a ...GitHub
Three years ago I made the questionable decision to mail #curl stickers to everyone who filled in a form within 24 hours. oboy, that was a lot of work...
Currently filling in the #curl user survey. It’s by *far* my most favourite tool ever and I can’t imagine working with HTTP without it.
Daniel's weekly report May 24, 2024
lists.haxx.se/pipermail/daniel…
#curl talk, 8.8.0, reproducible, ://, graphs, c-ares, survey, bonus, curl work
There's this plan to have some students implement TLS 1.3 Early Data support in #curl
github.com/curl/curl/discussio…
Adding TLS 1.3 Early Data Support · curl curl · Discussion #13743
I plan on mentoring a summer project with a small team of undergrad students to add early data support to cURL over about 8 weeks starting in June. (#13528) I'd made a basic 8-week ish plan to help...GitHub
curlhacker - Twitch
I'm Daniel Stenberg, maintainer and lead developer in the curl project. I stream curl related stuff. Release presentations, curl development and related topics.Twitch
A history of a logo with a colon and two slashes
daniel.haxx.se/blog/2024/05/21…
How the #curl logo got its colon slash slash.
curl_setup.h: add support for IAR compiler by josepho0918 · Pull Request #13728 · curl/curl
Enable some supported GCC attributes for IAR compiler.GitHub
“I could rewrite #curl”
Here's my collection of some less cheerful quotes to keep me firmly grounded. Blogged three years ago today:
Curl_vquic_tls_verify_peer: use correct API for wolfSSL by julek-wolfssl · Pull Request #13680 · curl/curl
wolfSSL_X509_check_host checks the peer name against the alt names and the common name. Fixes #13487. Tested using the same reproducer as in the issue. Correct url passes check.GitHub
On the #curl website, you can find 92 video presentations on all things curl: curl.se/docs/videos/
Almost 68 hours in total.
In the #curl project, being written in C, we always work on simplifying the code. One way is to use more internal helper functions and avoid direct use of some functions that are often involved in C mistakes/vulnerabilities.
To measure how this develops, we count number of these function calls used per every thousand lines of code. Over time.
In a graph.
DEPRECATE.md: TLS libraries without 1.3 support by bagder · Pull Request #13544 · curl/curl
Brought to the curl-library list on March 7, 2024. Discussed since then. No particular objections have been heard except the worry that apple device people might miss Secure Transport. Once #13539 ...GitHub
In the #curl project, we spend 3.3 days/day on running tests - around 140,000 tests per commit/PR. In addition to what every developer runs in their own systems of course.
Our test failure rate in CI jobs is at 0.004%, which is annoyingly high when running this many tests.
Data from Dan Fandrich's curl up 2024 talk: youtube.com/watch?v=TxNdAm845T…
Test Clutch by Dan Fandrich - curl up 2024
Dan talks about his test results analytics system and the combat and struggle against flaky tests and failing CI jobs.YouTube
Cool bug 🪳
Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses in #curl results in indeterminate SSRF #vulnerabilities.
curl disclosed on HackerOne: Incorrect Type Conversion in...
## Summary: Octal Type Handling of Errors in IPv4 Mapped IPv6 Addresses in curl allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that...HackerOne