"Base Score: 9.8 (Critical)"

curl disclosed on HackerOne: Buffer Overflow in cURL Internal...

A critical buffer overflow vulnerability exists in the `curl_msprintf()` function in cURL's internal printf implementation. The function writes for...

daniel:// stenberg:// 1 month ago

Made with AI. Of course.

daniel:// stenberg:// 1 month ago

We currently have three pending CVEs to be announced in the next #curl release (severity low + medium x 2) All three found with AI powered tooling. So it is happening.

daniel:// stenberg:// 1 month ago

On this day six years ago, we learned that mr Robot curls:

daniel.haxx.se

Mr Robot curls

The Mr Robot TV series features a security expert and hacker lead character, Elliot. Season 4, episode 8 Vasilis Lourdas reported that he did a "cu...

Exactly three years later, still this date, we found a #curl sighting in the movie Silk Road:

daniel.haxx.se

curl sighting: Silk Road

In the 2021 movie Silk Road, at around 19:23-19:26 into the film we can see Ross Ulbricht, the lead character, write a program on his laptop that u...

daniel:// stenberg:// 1 month ago

These are two of my favorite memes about companies putting AI into everything. if you have any additional favorite ones you want to share, I wouldn't mind a few more to spice up one of my coming talks with....

daniel:// stenberg:// 1 month ago

Asking for a friend. What is the proper celebrations when reaching 20,000 personal commits in an open source project?

daniel:// stenberg:// 1 month ago

Thanks to @npub1a6l3...5kg0 this is quickly becoming the most thorough and detailed resource on the #OpenSSL fork situation. Which fork does what and how?

GitHub

OpenSSL forks

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS,...

daniel:// stenberg:// 1 month ago

Welcome Georg Schulz-Allgaier as #curl commit author 1424:

GitHub

FIX: BUG: IPv6 CIDR notation in NO_PROXY variable or option by GenuaGSchulz · Pull Request #19828 · curl/curl

The Bug We noticed that using IPv6 CIDR-Notation in a NO_PROXY env var doesn't have the desired effect, contrary to what the documentation at h...

daniel:// stenberg:// 1 month ago

A new Hackerone issue was submitted for #curl and I had it closed as not applicable within four minutes. A new personal record I believe. (It will be disclosed asap.)

daniel:// stenberg:// 1 month ago

Reminder. #curl runs in all your devices. So I made a slide to show some of them. (yeah, I've used and shown this slide numerous times before and I will probably do it again...)