Search

Items tagged with: curl

#curl

If you incorrectly use -H 'Foo=bar' instead of -H 'Foo: bar', #Curl will ignore it and not send the header field. Really unexpected and error inducing, I would expect it to validate the parameter and fail.
#curl

#curl

#curl

can #curl send a request that's stored in a a text file?

GET /yadayada HTTP/1.1
Host: blahblah.com

#curl

#curl #eurobsdcon #EBC25 #ebc2025 @daniel:// stenberg://

@kytta primarily that #curl is C89 compliant so we can't rely on C99 types so we have our own, and we actually only have a signed version atm. Mostly out of laziness.
#curl @Nikita Karamov

I started thinking about when we should adapt #curl's progress meters to deal with > 63 bit download sizes (8192 Petabytes).

I'm thinking it might not be terribly far away when people can start downloading that. In particular when doing N super huge transfers in parallel.

Got me thinking about 128 bit math...

#curl

Just told my boss (CTO of 15 years for a web hosting company) that #curl doesn't just do HTTP. His mind is being blown in real time.
#curl

#curl

Twenty-four years ago on this day, Mac OS X 10.1 was released which bundled #curl with their OS for the first time.

curl 7.7.2

#curl

"A conversation with Daniel Stenberg, creator and maintainer of #curl, one of the most widely used networking tools on the internet. We talk about Daniel’s journey through decades of protocol work, the story of curl, what keeps him going, and how he balances open source with real life."

netstack.fm/#episode-6


Netstack.FM — A Podcast About Networking and Rust

Interviews, monologues, and deep dives into Rust and modern networking systems.
netstack.fm
#curl

#curl #hackerone #Slop @daniel:// stenberg://

Reminding the businesses that CRA compliance is not a problem with #curl

daniel.haxx.se/blog/2025/09/22…


CRA compliant curl

As the Cyber Resilience Act (CRA) is getting closer and companies wanting to sell digital services in goods within the EU need to step up, tighten their procedures, improve their documentation and get control over their dependencies I feel it could b…
daniel.haxx.se
#curl

Joshua Rogers sent us a *massive* list of potential issues in #curl that he found using his set of AI assisted tools. Code analyzer style nits all over. Mostly smaller bugs, but still bugs and there could be one or two actual security flaws in there. Actually truly awesome findings.

I have already landed 22(!) bugfixes thanks to this, and I have over twice that amount of issues left to go through. Wade through perhaps.

Credited "Reported in Joshua's sarif data" if you want to look for yourself

#curl

If no one sponsors #curl keeping OpenSSL 1.1.1 support around, we will drop it earlier than previously planned.

Leaches be leaches.

#curl

Giant company begs tiny Open Source project to graciously spend more of our copious spare time to help them - for free.

Apparently the latest #curl release has a build problem on HarmonyOS. What a pity.

#curl

For this exact date through #curl history I have nothing at all noted.

Possibly because this is my son's 19th birthday!

(My document with curl related event dates contains >300 separate events for 205 unique dates)

#curl

#curl

Working on adding Apple SecTrust support to curl (e.g. the native macOS and other Apple *OS system certificates store) and reaching out to the Homebrew/Macports people if they'd like that too or have other needs.
#curl

github.com/curl/curl/discussio…


Apple Native CA and homebrew/macports · curl curl · Discussion #18597

In the general discussion about curl's handling of a "native CA" and our addition of support for using Apple's SecTrust directly, the question arose how homebrew and macports can/wont make use of t...
GitHub
#curl

#curl #cve

In this interview, Daniel Stenberg, lead developer of #cURL, discusses how the widely used tool remains secure across billions of devices, from cloud services to IoT. He shares insights into cURL’s decades-long journey of testing, reviewing, and refining its code to minimize risks.

Stenberg also explains the team’s approach to handling vulnerabilities, ensuring transparency, and maintaining trust in the open-source ecosystem.

helpnetsecurity.com/2025/09/18…


Behind the scenes of cURL with its founder: Releases, updates, and security - Help Net Security

Explore how the cURL project keeps billions of devices secure, from vulnerability handling to best practices and updates.
Mirko Zorz (Help Net Security)
#curl

#curl

Starting now, the #curl man page is rendered to use the long form only of the command line options in text, instead of like before insist on mentioning both the short AND long option.

This should make the text easier on the eye. I could make it this way after having fixed so that the long-option-only also renders appropriate links in the web version.

A tiny step forward.

#curl

The plain ASCII version of the #curl man page consists of 37,720 words right now
#curl

#curl

#curl

#AI #ki #curl #slug

Feel free to point me to a piece of #curl documentation that is unclear whenever you fall over it and I'll try to improve it
#curl

2025 is already now the second busiest year ever in #curl history, when counting commits per year.
a bar graph showing commits per year, 2025 has 2105 which is the second most ever, 2024 had 2433.
#curl

#curl

sure, I'm game for #curl diving.
#curl

Coverity updated so I got to start the morning with 34 brand new false positives in #curl from the static code analyzer. ignore ignore ignore...
#curl

At some point I think it will only be fair to require --insecure for #curl to do an unauthenticated protocol transfer (unless it is localhost). For clear text http:// etc.
#curl

#curl

#curl

#curl

#curl

There's going to be more speak about AIs finding genuine security problems soon.

Google Big Sleep found one in #curl that we reveal tomorrow.... in about eight hours. (but no, we don't know how much was AI and how much was human or how many false positives they had to wade through to get there etc maybe they will let us know later?)

#curl

#curl

⇧