curl maintainer, protocol droid, likes to code.
"Nobody has any idea what is actually going on."
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
Warum heisst es "Rechenzentrum" und nicht einfach "KI-Endlager"?
😌
Opens the report:
"A malicious HTTPS origin can..."
Closes the report.😌
You spend hours on getting a fix in with a reliable test case. It's tricky, but you succeed. The world will be a better place.
...then comes ruff in CI and says: "Well you did not import 'A, B, C' but 'A, C, B', nyanyanya"
and you want to just put your fist through its face...😤
Looks like it‘ll be a day of human assessment of clanker security reports.
We‘ve done this several times this year already. Most of them are along the lines of
- someone sets option A and B
- and, at a weird time, switches option C
is #curl still doing the right thing?
Example:
You configure TLS session caching and use of TLS Early Data and subsequently set certificate pinning (not set when the session was cached), is everything checked correctly still?
*looks for a rusty nail*🥵
Quite many
#curl versions out there:

Coffee with mother yesterday. She: „What is it with hacking refridgerators?“
Simple greed! Fridge companies sell maintenance.
That used to mean sending out a technician, checking, ordering parts, delivering and installing.
With fridges on the internet, they check online for faults and send parts and the technician in one visit.
Much cheaper!
Unless you count the cost of proper security. Which cuts into/eliminates profits.
Better leave that out and get promoted away before things go wrong.
Congrats to the US people who worked hard to avert the end of the republic.
And to the fossil traders whose greed raised prices so high, it became obvious to people that „this cannot continue“.
Open Source maintainers should also get one homicide free and a couple of bank robberies.
They‘ll still be beneficial to society.💁🏻♂️
Maybe it‘s all the muscle, maybe it‘s the horns. Whatever it is, go for your dreams, donkey!🫏🫦🐂
https://www.theguardian.com/science/2026/nov/02/tender-bond-male-donkey-bull-baffles-scientists
A list of „security“ design patterns that annoy and frustrate users but do not bother attackers at all.
https://joshua.hu/security-useless-changes-theatre
„Dear Professor, how did it come to the Dia de los Muertos that we celebrate now for over a thousand years?“
„That is indeed a big debate amongst the history scholars! The majority is convinced it started with people sacrificing their dead to the god ‚Tour‘ - which had a lot of followers in that age…“
„And your personal theory?“
„In short: the spy service of the now sunken ‚United Kingdoms‘ started it to get hold of an evil German and his white cat!“
„Sounds a bit far fetched, no?“
Sam Altman discovering Practical Karl Marx:
Seize the means of production, into the hands of a functionary who distributes it in the best interest of the people and especially himself.