@daniel:// stenberg://
I write curl. I don't know anything.
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
Heads up! In #curl 8.23.0 (end of October 2026) SMB(S) support will be gone.
https://github.com/curl/curl/pull/22652
https://github.com/curl/curl/pull/22652
We are at 9 days to the next #curl release and we have only *three* pending CVEs to announce (two low, one medium).
Three is like nothing!
(Mythos says it can't find any more. Zeropath finds no vulnerabilities. Codex security shows an empty list.)
Three is like nothing!
(Mythos says it can't find any more. Zeropath finds no vulnerabilities. Codex security shows an empty list.)
99.9% bots
I'm now ahead of @nprofile1q... with a mere 0.09 percentage points...
This counts share of lines of #curl production code with our names on when you do git blame - right now in git master.
This counts share of lines of #curl production code with our names on when you do git blame - right now in git master.
Download ten files in parallel from localhost using HTTP/1 over HTTPS, 10 times each - with #curl. Each file is 100MB. Limit the download speed to 5000KB/sec.
How much CPU is "good" to spend on this on a modern intel arch?
Perhaps a median of 2.73% of an i7-13700K core is okay?
https://curl.se/perf/#h1rate-cpu
(the tests run on my local machine, at that single 3.8 spike I probably did something else on the host)
How much CPU is "good" to spend on this on a modern intel arch?
Perhaps a median of 2.73% of an i7-13700K core is okay?
https://curl.se/perf/#h1rate-cpu
(the tests run on my local machine, at that single 3.8 spike I probably did something else on the host)
Happy to appear (via screenshot) in a sec conference talk about AI vuln discoveries held by the CVE program the other week.
The video of the whole thing is here: https://www.youtube.com/watch?v=fV_X57aD188
The video of the whole thing is here: https://www.youtube.com/watch?v=fV_X57aD188
Because why wouldn't your Nibe geothermal heat pump run #curl?
(Thanks Jan Lundmark)
(Thanks Jan Lundmark)
The C Programming Language has only 32 keywords. C programmers don't need syntax highlighters.
@nprofile1q... I quite like my emacs syntax highlighting for C!
I've talked to several new #curl customers over the last few weeks who want back-ported security fixes for their older curl releases. To get them secured without having to do a full version upgrade.
Stay tuned for multiple patch releases coming soon for older curl version branches. Shipped under the rock-solid curl umbrella, for paying customers.
If YOU also need a security-fixed older curl release - let's talk!
Stay tuned for multiple patch releases coming soon for older curl version branches. Shipped under the rock-solid curl umbrella, for paying customers.
If YOU also need a security-fixed older curl release - let's talk!
It's now 10 whole years since I tried to do my duty for the community and remove the #curl alias from PowerShell.
It's still there.
https://daniel.haxx.se/blog/2016/08/19/removing-the-powershell-curl-alias/
It's still there.
https://daniel.haxx.se/blog/2016/08/19/removing-the-powershell-curl-alias/
1
The vulnerability report frequency has gone down significantly for #curl in August compared to June. Is the avalanche already dying down? It is too early to tell for sure - maybe it's just a glitch in the matrix.