Med-Mastodon

29 posts10 participants0 posts today

daniel:// stenberg://I checked the latest stats. The median time a <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> CVE lingers in code before getting reported: 2163 days (almost 6 years). The average is 2893 days (almost 8 years)

daniel:// stenberg://does my late night habits make me commit <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> security problems at strange hours?Not obviously.The hour of the day with most <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> security problem commits is 14!The top-5 bad commit hours of the day:14:00 21 vulns 22:00 17 23:00 11 15:00 11 11:00 10Hard to make fun graph out of...

daniel:// stenberg://Vulnerability distribution present in <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> codeFor every moment in time, how many vulnerabilities of different severity were present in code. We know now because these vulnerabilities have been reported and fixed since then.The peak is at 7.41.0 on 2015-02-25 with 85 vulnerabilities present!

Who Let The Dogs Out 🐾<a href="https://mastodon.ml/tags/shell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shell</a> <a href="https://mastodon.ml/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> <a href="https://mastodon.ml/tags/profession" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#profession</a> <a href="https://mastodon.ml/tags/humor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#humor</a>Хочешь сменить профессию, но не можешь никак определиться? Узнай своё будущее через коды ОКВЭД:```sh curl -s <a href="https://classifikators.ru/assets/downloads/okved/okved.csv" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://classifikators.ru/assets/downloads/okved/okved.csv</a> | iconv -f windows-1251 -t utf-8 | sed 's/.*;\s*//g' | sort -R | head -1 ```

daniel:// stenberg://Working on a new graph.Total severity distribution in <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> vulnerability reports

defnullI feel honored that <a href="https://chaos.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> depends on my multipart library (at least the curl test suite) but does it? I can find the dependency but not that it is used. I wonder how that happened :rubberduck:

daniel:// stenberg://I'm introducing limits per test case in <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> test suite to make sure we don't unintentionally accidentally suddenly use many more allocations or much more concurrent memory than we can allow.<a href="https://github.com/curl/curl/pull/17821" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/curl/curl/pull/17821</a>

daniel:// stenberg://Found in the pending release notes for the coming <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> 8.15.0 release:Public curl releases: 269Command line options: 269Prime time.

daniel:// stenberg://Welcome Piotr Nakraszewicz as <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> commit author 1388: <a href="https://github.com/curl/curl/pull/17804" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/curl/curl/pull/17804</a>

daniel:// stenberg://The <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> user survey 2025 analysis is here.<a href="https://daniel.haxx.se/blog/2025/07/03/curl-user-survey-2025-analysis/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://daniel.haxx.se/blog/2025/07/03/curl-user-survey-2025-analysis/</a>

Stefan EissingComparing curl's latest improvements on macOS vs Linux:<a href="https://github.com/icing/blog/blob/main/curl-platform-perf.md" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/icing/blog/blob/main/curl-platform-perf.md</a><a href="https://chaos.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> <a href="https://chaos.social/tags/performance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#performance</a>

daniel:// stenberg://"I've never once needed to do something with it that it couldn't"Top-notch comment in the <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> user <a href="https://mastodon.social/tags/survey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#survey</a>

daniel:// stenberg://Every 6th respondent says they used <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> for 18 or more years!<a href="https://mastodon.social/tags/survey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#survey</a>

daniel:// stenberg://Another glimpse from the <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> user survey 2025users score our security handling performance high

daniel:// stenberg://<a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> user survey 2025 respondents like Mastodon:

daniel:// stenberg://dear big-CDN-employee,asking <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> API questions in private emails to me is NOT an acceptable way to get a quick response unless you also pay for said private support / Daniel

daniel:// stenberg://Look, a new <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> option proposed by <a href="https://mastodon.social/@icing" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@icing</a>: '--out-null'<a href="https://github.com/curl/curl/pull/17800" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/curl/curl/pull/17800</a>

daniel:// stenberg://that's in particular important to keep in mind when looking at a graph like this, showing the number of known vulnerabilities per 1,000 lines of code in <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> over time:

daniel:// stenberg://One of my fav graphs of <a href="https://mastodon.social/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> improvement in recent years, is the one showing vulnerabilities reported separated between low/medium and high/critical.The report frequency has gone up, but they are less critical these days.

Kevin Karhan :verified:<a href="https://infosec.exchange/@0x00string" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@0x00string</a> fascinating... I wounder if you could imagine building an <a href="https://infosec.space/tags/ActivityPub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActivityPub</a> client solely with tiny-<a href="https://infosec.space/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#curl</a> and <a href="https://infosec.space/tags/bash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bash</a>...

Recent searches

Search options

Administered by:

Server stats:

#curl