daniel:// stenberg://

@bagder

I write curl. I don't know anything. 🌉 bridged from ⁂ follow @ap.brid.gy to interact

0 Folgt3.209 Follower3.475 Posts

X Bluesky

Ist das dein Profil?Übernimm es — dann gehört dir bagder.dirty.social.Profil übernehmen

daniel:// stenberg://@bagder· 17d

It seems there is a limit to the freebies given from GitHub, even for me:

AI usage, like scanning and fixing, is blocked because billing isn't configured.

daniel:// stenberg://@bagder· 18d

That image of my "AI sentiment" change over time comes from a LinkedIn post by Paul Calhoun […] [Original post on mastodon.social]

Daniel Stenberg on AI security - sentiment over time

daniel:// stenberg://@bagder· 20d

It might not be long now until I'm number two...! (That Stefan guy is also known as @icing)

top-40 authors in curl, names git blame shows the most. Stefan Eissing at 31.30% closing in on Daniel's 32.57% ...

daniel:// stenberg://@bagder· Jul 12

The current top story on the FT Magazine is pay-walled but features some mentions of #curl and yours truly... (the picture shows the start of it) https://www.ft.com/content/cec8df9e-b43b-4cd1-8feb-c07e804e8d33

$If you are reading the digital version of this story, you have just used a small piece of software from a project called cURL. If you are reading it in print, but you have used a smartphone, laptop or tablet today, you have used cURL. If, somehow, you haven’t touched a browser or app, but you’ve used a modern car, printer, TV or gaming device, you’ve used cURL. You and the majority of humans on Earth use it several times every day, though only a tiny fraction of its users are aware of its existence. While online, you are constantly requesting packets of information from other machines. But these requests need to follow specific protocols over destination, routing, format, permission; cURL administers these details. First released in 1996, it is now a piece of the invisible plumbing of the internet, small but prevalent, part of the many thousands of lines of code that run constantly in the background of our digital lives. Its maintainers estimate that its component, libcurl, has been installed more than 20 billion times. Even its admirers are rarely conscious of it as they use it, just as it would be impossible always to consider the pumps that make water flow when we open a sink tap.$

daniel:// stenberg://@bagder· Jul 8

The biggest selling Danish game ever, 007: First Light, uses #libcurl.

daniel:// stenberg://@bagder· Jul 8

Bliss in progress. #curl maintainer on a beach.

Daniel in shorts and tshirt on a long sandy beach looking out at the sea. Cloudy sky.

daniel:// stenberg://@bagder· Jul 3

my week: https://lists.haxx.se/pipermail/daniel/2026-July/000161.html post-release, bliss, graphs, website, NTLM, wcurl

daniel:// stenberg://@bagder· Jul 1

Is it time for another #curl graph? 70, 80 and 90 of all commits were done by this many authors, over time https://github.com/curl/stats/pull/45

daniel:// stenberg://@bagder· Jun 30

Added two fancy and helpful datelines: https://github.com/curl/stats/pull/42

now also showing at which points the average and the median vulnerability age occur

daniel:// stenberg://@bagder· Jun 30

Upgraded #curl graph: https://github.com/curl/stats/pull/41

vulnerability density in code by different severity levels

daniel:// stenberg://@bagder· Jun 26

My week: https://lists.haxx.se/pipermail/daniel/2026-June/000160.html release, security, PSL, inet_ntop, OpenSSL, wolfSSL, QUERY

AISLE on curl

curl is the hardest codebase to find vulnerabilities in for us

(with Stanislav Fort from Aisle in the photo)

daniel:// stenberg://@bagder· Jun 25

Crap, I was looking for an email from January 2000 ...

screenshot showing links to curl-library mailing list archives from October 2000 to June 2026

daniel:// stenberg://@bagder· Jun 25

The #curl vulnerability mountain. A visualization I like. https://curl.se/dashboard1.html#vulnerabilities-in-code

number of vulnerabilities present in curl code in releases trough time

daniel:// stenberg://@bagder· Jun 25

A snapshot favorite of mine from curl up Prague earlier this year when Stanslav Fort from Aisle did his presentation:

AISLE on curl

curl is the hardest codebase to find vulnerabilities in for us

daniel:// stenberg://@bagder· Jun 23

More than 100 individuals has contributed to making curl 8.21.0 into what we ship tomorrow...

Commit authors: 45, 26 new (total 1489)
Contributors: 96, 69 new (total 3731)

daniel:// stenberg://@bagder· Jun 23

In anticipation for the #curl release coming tomorrow, let me remind you that there are a few companies that keep us afloat. Friends.

Haxx, wolfSSL, Fastly, TeamViewer, GitHub, kirei, elastic, Automattic, Coderabbit

daniel:// stenberg://@bagder· Jun 23

Cool to see the Linux Kernel follow #curl and ban use of strncpy 😎 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1a3746ccbb0a97bed3c06ccde6b880013b1dddc1

graph showing curl's use of strncpy go to zero in late 2024

daniel:// stenberg://@bagder· Jun 22

https://daniel.haxx.se/email/2020-06-04.html

Dear Mr. Steinberg,

I am currently cleaning up the hard drives on our server.
I find a directory called "kworking" on every drive.
There is a "curl.exe" file in the directory

What is this application?

Thank you in advance for your information!

daniel:// stenberg://@bagder· Jun 21

The longest function in #curl (in number of lines) is now less than half the size the longest function was for the last twenty-five years...

The longest function in curl is now less than 500 lines long. The max peaked in >3000 lines in late 2024.

daniel:// stenberg://@bagder· Jun 20

my week: https://lists.haxx.se/pipermail/daniel/2026-June/000159.html summer of bliss, pending release, HTTPS-RR, strftime, QUERY

daniel:// stenberg://@bagder· Jun 18

#curl may have more CVEs to report than ever, but the less visible trend is that they are all less sever in recent years This is the graph look with the pending announcements included. Per the year the vulnerabilities were published.

Vulnerability reports high vs low in the curl project, showing that most recent reports are LOW or MEDIUM

daniel:// stenberg://@bagder· Jun 18

If I get a voice I think I better use it for good. I've agreed to this meeting. What do you think I should bring/suggest/insist on?

Hello Daniel,

I am special counsel to the Attorney General for the state of New York. I work on policy issues involving technology and AI. [redacted], copied here, is a technologist and software engineer. Recently we have been thinking about the impact of increases in identified cybersecurity vulnerabilities caused by advances in frontier AI models. Your blog post (link) was shared by a friend in the tech community. Would you be willing to have a call with [redacted] and me to discuss what policies might effectively support the efforts of maintainers to stay ahead of the volume of vulnerabilities being discovered using LLMs?

daniel:// stenberg://@bagder· Jun 18

I'm super happy with this feedback from my Bsides Vilnius keynote a few weeks ago. Not a single meh, and a quite decent 77% "loved it".

A graph showing feedback distribution between meh, good and loved it, showing 23% good and 77% loved it (no meh at all)

daniel:// stenberg://@bagder· Jun 15

Later this week #GitHub introduces a way to limit how many pull requests users without write access can have open at one time... As a way to combat heaps of low-quality PRs. I'll start out trying with this set to 2 for #curl.

"Restrict how many pull requests users without write access can have open at one time"

daniel:// stenberg://@bagder· Jun 12

my week: https://lists.haxx.se/pipermail/daniel/2026-June/000158.html security, curl meta-data, Humans in control, Coverity is dead, Sponsors

daniel:// stenberg://@bagder· Jun 12

Updated number of projected #curl vulnerabilities for 2026. Now looking at 70+ for the whole year:

graph showing vulnerabilities per year in curl. 2026 is at 36 by the end of the first half, expecting the total to surpass 70 at end of year

daniel:// stenberg://@bagder· Jun 12

another day, another bump. Number of pending CVEs to be announced in sync with next #curl release: 18 😱

daniel:// stenberg://@bagder· Jun 7

What would Roy Fielding do? https://sellshirts.com/product/11899

daniel:// stenberg://@bagder· Jun 5

My week: https://lists.haxx.se/pipermail/daniel/2026-June/000157.html security, curl up, feature freeze, talk pause

Daniel in front of a huge display showing a bar chart with vulnerability report increased pace - from BSides Vilnius 2026

daniel:// stenberg://@bagder· Jun 4

Two action photos of me from this morning's keynote at #bsidesvilnius What a great event. What a lovely audience. What a day!