bagder

bagder, 7 months ago to random

Someone mentioned another OS. #curl has run on these 93 operating systems. Do you know of one not yet mentioned?

bagder, 9 months ago to firefox

"Did any user in the world want a user tracking and ad platform baked directly into their browser? Probably not, but this is Google, and they control Chrome, and this probably still won't make people switch to Firefox."

https://arstechnica.com/gadgets/2023/09/googles-widely-opposed-ad-platform-the-privacy-sandbox-launches-in-chrome/

I stick to #Firefox

bagder, 5 months ago to random

Making it harder to do wrong

#curl is written in C. We try to write better C to reduce the risk of future vulnerabilities.

https://daniel.haxx.se/blog/2023/12/13/making-it-harder-to-do-wrong/

bagder, 8 months ago to random

Today we got what must be the most alarming first line in a newly file sec issue to #curl:

"To replicate the issue, I have searched in the Bard about this vulnerability"

... followed by a complete AI hallucination where Bard has dreamed up a new issue by combining snippets from several past flaws. Creative, but hardly productive.

Closed as bogus.

bagder, 9 months ago to random

Next week on Aug 31 I will do my super long #curl class: "Mastering the curl command line" live on Twitch, also recorded for later watching.

Expect 2.5 hours or so of non-stop #curl command line talk. By me.

https://daniel.haxx.se/blog/2023/08/08/mastering-the-curl-command-line/

bagder, 4 months ago to random

Another bogus #curl #CVE is now in the wild: https://www.cve.org/CVERecord?id=CVE-2023-52071

bagder, 9 months ago to random

"CVE-2020-19909 is everything that is wrong with CVEs"

A claimed "9.8 CRITICAL" flaw in #curl that does not exist.

https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/

bagder, 1 month ago (edited 1 month ago) to cisco

I was reminded of the great #Cisco security fix of 2019

#curl

bagder, 7 months ago to random

We disclosed this #hackerone report against #curl when someone asked Bard to find a vulnerability, and it hallucinated together something:

https://hackerone.com/reports/2199174

bagder, 6 months ago to random

#curl has now paid 71,400 USD in bug-bounties.

For security.

bagder, 1 year ago to random

Do NOT. I repeat. Do NOT remove curl.exe from your Windows System32 folder to silence a (stupid) security scanner. It will lead to tears and sorrows.

And if you do, please don't ask me for help when you've broken your Windows install. I can't fix that.

bagder, 9 months ago to random

I maintain a comparison table. #curl vs other "download tools". Tell me what's missing/wrong in it: https://curl.se/docs/comparison-table.html

(the screenshot here is a partial)

bagder, 6 months ago to random

I never used any of the modern AI tools for writing code, copilot etc. I'm old. Traditional. Using emacs. And I write my code manually - like a cave man.

bagder, 1 year ago to random

Upon learning that #curl has no bug bounty for website issues, the person refuses to tell us what the problem is because "I think there is no benefit for me"

Yeps, these people exist.

bagder, 7 months ago to random

Attempt 1. What happens when you invoke #curl. In a single picture.

bagder, 6 months ago to random

The updated 100 operating systems #curl has run on. (Dropped two, added two)

bagder, 3 months ago to random

"The issue was detected by our new AI-powered vulnerability scanner" ...

AAAAAAA

https://github.com/curl/curl/issues/12983

bagder, 5 months ago to random

Please don't make this a new trend. 😕

(issue closed by bot because the user filing the issue has not starred the repository...)

bagder, 9 months ago to random

Tell me my mistakes and omissions in my #curl vs #wget venn diagram

bagder, 2 months ago to random

ln -s [one] [two]

the arguments are done in the same order as if you would have done it with cp.

Yes, it really is that easy. You can stop worrying about it now.

bagder, 8 months ago to random

How I made a heap overflow in #curl

Let me talk CVE-2023-38545 a bit

https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/

bagder, 9 months ago (edited 9 months ago) to random

Number of planets known to have run #curl: 2

bagder, 11 months ago to random

This is the Siemens EQ900.

This baby runs #curl.

bagder, 10 months ago (edited 10 months ago) to random

A user is rude and DEMAND a change to your project, but after lots of back-and-forth a slightly different improvement is landed. Should the person get credit for their "report"?

bagder, 1 year ago to random

if you feel that my critique of the Gemini protocol spec is totally out of line, then maybe address those details in your response. You don't have to tell me that I'm a horrible person.