Skip to main content

Search

Items tagged with: curl


Welcome to Stephen Farrell as #curl commit author 1260: https://github.com/curl/curl/pull/11922
#curl


Support for RFC 9421 - HTTP Message Signatures in #curl ?

https://github.com/curl/curl/discussions/13376

#curl


I wonder if @bagder is aware that millions of Garmin users are carrying a #curl licence credit on their wrists


Welcome blankie as #curl commit author 1259: https://github.com/curl/curl/pull/13372
#curl


#curl sometimes fails to access some servers. In most situations the problem is not in curl itself but on the server side. Example:

1. Fails: curl https://www.radissonhotels.com

2. Works: curl -A 'Mozilla/5.0 xx Chrome/119' https://www.radissonhotels.com

3. Fails: curl -A 'Mozilla/5.0 xx Chrome/118' https://www.radissonhotels.com

4. Fails, too: curl -A 'Mozilla/5.0 xx Chrome/1189' https://www.radissonhotels.com

Perhaps they perform #filtering to obtain improved #security? It's hard to tell, but any serious attacker surely knows how to spoof the user agent string and bypass such simple #regex


I was reminded of the great #Cisco security fix of 2019

#curl


On this day twenty-six years ago, we shipped #curl 4.2

It introduced HTTPS support (powered by SSLeay) and the -T command line option.

As a bonus, a look at the original cURL logo:

#curl


Let's kick this fine Monday morning off with a #curl issue filed against curl 7.37.0, released in May 2014...

https://github.com/curl/curl/issues/13370

#curl


The #curl #git repository is cloned on average once every 6 seconds.
#git #curl


Today I found a TUI frontend for curl! 🔥

🌀**cute**: TUI HTTP client with API/auth key management and request history/storage.

🌐 Supports importing Postman collections!

🦀 Written in Rust & built with @ratatui_rs

⭐ GitHub: https://github.com/PThorpe92/CuTE

#rustlang #ratatui #tui #curl #http #request #api #auth


Found another Curl resource; that always makes me giddy.
http://cheat.sh/
It's a set of command line cheat sheets accessible through super simple curl requests.

#curl

#curl


On this day, eleven years ago, we shipped #curl 7.30.0 which among lots of things introduced support for STARTTLS with imap, pop3 and smtp.

https://curl.se/changes.html#7_30_0

#curl


Welcome Toon Claes as #curl commit author 1258: https://github.com/curl/curl/pull/13348
#curl


Welcome Colin Leroy-Mira as #curl commit author 1257: https://github.com/curl/curl/pull/13137
#curl


tip for STF: the IBB bug-bounty (which #curl is part of) gives 20% of the bounty to the project and 80% to the reporter - which I think is nice because there is certainly work to be done from the project's part as well to deal with the issues ...
#curl


unfortunately, the new #openssl version does not do #QUIC good enough for #curl to consider removing the experimental label from it:

https://curl.se/mail/distros-2024-04/0001.html


the #curl docker image has been pulled 5966498898 times

should reach 6 billion in 10-12 days

I'll queue up a bragging blog post for the occasion.

#curl


when using a C compiler last patched nineteen years ago, on Solaris, there is this issue...

Today's episode in "ancient machines that never die" and they all (try to) run #curl.

#curl


Welcome Jérôme Leclercq as #curl commit author 1256: https://github.com/curl/curl/pull/13264
#curl


Today when #curl has just surpassed 32,000 commits it is *almost* at 34.000 stars on GitHub. https://github.com/curl/curl
#curl


Welcome Kailun Qin as #curl commit author 1255: https://github.com/curl/curl/pull/13314
#curl


CURL Up 2024

Let's meet @bagder and the other #opensource developers of the #CURL project

📅 May 4-5, 2024
📍 Stockholm, Sweden 🇸🇪
🏨 Best Western Hotel
🎤 English
🌍 github.com/curl/curl-up/wiki/2024

https://www.mbsplugins.de/archive/2024-04-08/CURL_Up_2024


"I was offered 2000 USD funding to the curl project, via a crypto currency and
an elaborate setup. I told them we happily accept funding but only as "real
money". They then declined to fund us." -- good riddance!

#curl @bagder


MPTCP support to #curl? https://github.com/curl/curl/pull/13278
#curl


Today we celebrate @icing having reached 1.00% (319) of all commits done in #curl in only 863 days from his first merged commit. This makes him ranked the 12th author in #curl by number of merged commits.


Them: we're excited to offer the #curl project a grant of $2,000 in USDC.

(USDC? Quick Google. What's that?)

Me:Sorry, I'm not interested in any crypto currencies. If you can't pay real money then I'm not interested.

#curl


Docker-Sponsored Open Source (hub) insists that one cannot have a path to commercialisation - https://www.docker.com/community/open-source/application/#:~:text=Qualification%20Criteria ... seems parochial at best ... at worst why is docker hub getting involved ? Removing rate limiting as a benefit for us also seems to ignore that the benefit is almost entirely theirs. not sure #docker hub is for #curl


People often ask me if I ever have detected an attempt to plant a backdoor in #curl. But I have never. I use to say that exploiting a mistake, a security vulnerability, is a MUCH more likely attack scenario because trying to merge a backdoor is super difficult.

But that only goes for outsiders. An insider, a trusted maintainer since years back, of course has a much better opportunity to sneak in malicious code etc. Still not easy though.

#curl


Can I just say that I have created #curl releases "the #xz way" since the 90s: I generate the release tarballs on my machine. It makes the tarball have (generated) files included that are not present in git. It's a feature. But it also makes it harder for observers to figure out if the additional files are fine or not.
#xz #curl


join me live now at https://www.twitch.tv/curlhacker for #curl release details
#curl


ThePrimeTime did a pretty entertaining video about the AI security report filed against #curl a few months back:

https://www.youtube.com/watch?v=e2HzKY5imTE

#curl