Search

Items tagged with: cURL

#curl #trurl

#curl

#curl

#curl

I have had multiple persons tell me recently that they truly hesitated and made really sure they didn't submit slop before they filed their first security reports to #curl.

Meaning: public shaming seems to at least partially work. Banning, taunting and ridiculing the fools works as a reminder for people to maybe think again and make sure.

== less wasted time for us.

#curl

#curl

#curl gets some of the worst #AIslop "vulnerabilities" reported to it via Hackerone: Here we have a fake 90s exploit assuming executable stack and x86 arch. Someone seriously passing this as their own research is stupid beyond belief.

hackerone.com/reports/3395227

Fake exploit obviously generated by lage language model (LLM).

curl disclosed on HackerOne: Use of Deprecated strcpy() with...

Discovery Method Step 1: Initial Security Scan ``` # Find all files using dangerous string functions find src/ -name "*.c" -exec grep -l "strcpy\|strcat\|sprintf\|gets" {} \; # OUTPUT: #...
HackerOne
#curl #aislop

#curl binary builds at curl.se/windows/ started using a fresh public suffix list, and will bump them regularly. (no longer relying on the copy bundled with libpsl, which is almost 2 years old) github.com/curl/curl-for-win/c…

psl: add versioned public suffix list updates [ci skip] · curl/curl-for-win@a987219

Replacing the public suffix list bundled with libpsl. The original promise / expectation was that libpsl sees regular updates, and a psl update with it, but the latest release is soon to be 2 year...
GitHub
#curl

we are two weeks away from the pending #curl 8.17.0 release
#curl

#curl

oh so *that's* what people use "postman" for! I was wondering what all the fuss was about

Spare a thought for the real-life #postman instead folks. (As you #cURL up in your cozy console) 📮

#curl #postman

#curl

I would of course never get any medals or recognition at all from anyone without the awesome friends and people in the Open Source universe.

I try to lead by example but I and #curl would not be where we are without the thousands of contributors.

I accept this medal, but know that you all helped me get it.

Thank you all. Let's improve the world, bit by bit the way we know.

#curl

#curl

This reads like a warning. So is cURL like nuts? Are people allergic to cURL!?

@bagder my watch might contain your software, maybe. They aren't 100% sure though. 🤷 🤣

[Note to reader, it almost certainly does contain cURL. I would be shocked if it did not!]

#WristCheck #cURL

A Garmin Venu 3 watch on wrist showing the about page information, which includes the line, "This product may contain Curl, distributed under the MIT/X License."
#curl #wristcheck @daniel:// stenberg://

#curl

we now do #curl scans with ZeroPath
#curl

On this day twelve years ago, in 2013, #curl got its first ever CI jobs. On Travis CI.

Before that we only ran post-merge tests on a set of volunteers' machines.

Today, we have around 230 separate CI jobs and we have tripled the number of test cases since then.

#curl

#curl #chart

#curl

#curl backends, the bathroom poster version October 2025
curl's large set of different backends on an architecture layout style image
#curl

#curl

#curl

We're at 809 received #curl issues from "team AI tooling", out of which about 15% has turned into commits/fixes.

The false positive/we don't care rate went up significantly when the scan included tests and examples. We should simply exclude those parts from normal scans as they live by different rules.

Never a dull moment.

#curl

what does #curl use for the CI?
#curl

Random current stats from the #curl CI (the last 30 days):

Tests executed per day: 1400019.4

Time spent running tests per day: 1087073 sec./day (12.6 days/day)

Total clock time spent running tests: 32612201 sec. (377 days)

Average time spent running each test: 0.776 sec./test

Number of git commits tested: 306

#curl

If you're curious, here are 158 of Joshua's reported issues on #curl to give you an idea what we talk about.

We have manually gone trough them all and dismissed or addressed them. None of them has been deemed a security problem. Not all the PRs for the valid problems have been merged yet.

gist.github.com/bagder/d1fff7f…


round three from Joshua

round three from Joshua. GitHub Gist: instantly share code, notes, and snippets.
Gist
#curl

#curl

#curl

One of the recent AI generated bug reports for #curl quite impressively identifies mismatches between a function header's comment mentioning that an argument is optional, but the code uses it unconditionally.

This taking comments into account certainly allows for some extra magic the classic code analyzers can't do.

#curl

#curl October 9. The same number of commits done this year (2433) so far as the entire previous top-year with the most commits (2024).

We're not dead yet.

a bar graph showing year 2024 and 2025 at 2433 commits each
#curl

#curl

In the 28.7 days since the #curl release, we have merged 233 bugfixes (8.13 per day)

Yeah, its a little crazy here right now. Those kids with the new tools reporting problems... 😁

#curl

#curl

#curl

Mr @samueloph posted two videos on #wcurl and #curl in Debian:

"wcurl - one year later - DebConf 25" youtube.com/watch?v=RvnDvic2ea…

Short presentation about what happened since wcurl’s creation in May 17 2024 and what will happen next.

"curl maintainers BoF - DebConf 25" youtube.com/watch?v=OhTjgU7LIO…

curl maintainers meet-up to discuss HTTP3, GnuTLS, wcurl and other things.


curl maintainers BoF - DebConf25

curl maintainers meet-up to discuss HTTP3, GnuTLS, wcurl and other things.Presenter:Samuel Henrique "samueloph" is a software developer focused on Debian, Li...
YouTube
#curl #wcurl @Samuel Henrique

#curl

As of now, I am no longer the author of more than half the lines added to the #curl repository. The "others" have overtaken me. I have now added less than half the lines.
graph showing that "others" have now added more lines to the curl git repository than Daniel, with plots showing the growth since year 2000
#curl

#curl

#technology #AI #cybersecurity #curl #bugs #HackerNews #sast

⇧