@daniel:// stenberg://
I write curl. I don't know anything.
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
If you're heading to the #OpenSSL conf in Prague Oct 13-15 make sure you chase down @nprofile1q... and unload him of a few #curl stickers.
He's going to be our official distributor there. You can have your fix from him. For free. You know you need one. Or two.
He's going to be our official distributor there. You can have your fix from him. For free. You know you need one. Or two.
Today we celebrate #curl 25 years on Apple computers:
https://daniel.haxx.se/blog/2026/09/25/25-years-on-apple-computers/
https://daniel.haxx.se/blog/2026/09/25/25-years-on-apple-computers/
Organisation curl
Job title internet janitor
Attending Social: No
Filling in the registration form for a conference talk I'll do in a few weeks.
Job title internet janitor
Attending Social: No
Filling in the registration form for a conference talk I'll do in a few weeks.
#curl 8.23.0-rc2 is here. The second release candidate: https://curl.se/rc/
Do not use release candidates in production. They are work in progress. Use them for testing and verification only. Use actual releases in production.
Do not use release candidates in production. They are work in progress. Use them for testing and verification only. Use actual releases in production.
When we announce over 20 new #curl CVEs on October 14, you will learn that every single one of them were found by clever humans using harnesses powered by AI models. Every. Single. One.
The holy trinity of modern vulnerability research.
The holy trinity of modern vulnerability research.
Another security person said this about #curl in an email to me the other day:
"Maybe we're really headed towards curl being the most informally verified library in existence (although it seems to me it likely already is)."
"Maybe we're really headed towards curl being the most informally verified library in existence (although it seems to me it likely already is)."
Dan Lorenc at Chainguard posted this statement about #curl on LinkedIn...
because obviously on Windows "CON[superscript 1]" is also a reserved file name... *sigh* And yeah, you can write that either with ISO8859-1 *or* UTF-8 ...
You couldn't even make these things up if you tried.
You couldn't even make these things up if you tried.
It's Friday, so consider adding your favorite (or maybe least favorite) #curl thing as a quiz question here: https://github.com/curl/quiz
#libcurl's URL parser API celebrates 8 years: https://daniel.haxx.se/blog/2018/09/09/libcurl-gets-a-url-api/
Updated chart showing the share of #curl vulnerabilities caused by "C mistakes" as a share of all the vulns we know existed in code over time.
