Notices by daniel:// stenberg:// (bagder@mastodon.social), page 6

The thing about me being a BDFL for #curl is that it has the D in there. I have the means and ability to push for just about anything I like. I say that I truly try to be a benevolent dictator, but then I presume quite a few dictators would say so.

Next week I will tell you all about how I view this dictatorship and how it is not quite like a dictatorship of a country since in our case, everyone could just leave if I misbehave.

@gbraad the left one of the drawings - of me (!) in a curl shirt -is from my daughter from maybe 10 years ago, the second (the curl laptop) is a newer one from @kushal's daughter. They're just great.

@kaia it's an analog volume control for my speakers, probably 25 years old or something...

How to verify a #curl release

https://daniel.haxx.se/blog/2024/05/23/how-to-verify-a-curl-release/

How we are not the next xz.

Please consider donating a few minutes of your time and answer the #curl user survey 2024:

https://daniel.haxx.se/blog/2024/05/14/curl-user-survey-2024/

@Parkplusplus it is primarily the consolidation thing, but also the fact that stackoverflow makes it really hard to propagate the *real* and proper answers and now their latest aggressive AI sellouts.

It has been a long time coming, but I've made it official:

"Daniel no longer answers questions on stackoverflow. Use a dedicated public curl forum for accurate and timely answers about anything #curl. "

(yes, speaking about myself in 3rd person)

https://stackoverflow.com/users/93747/daniel-stenberg

@hcmh clearly no big sites are ever wrong. How would that work? 😜

"To me, the latest is the latest my OS provides me. If #curl maintainers dont care about pushing the latest into the OSes they support, it's not me to blame. I think curl maintainers should push Centos to provide the latest to all users. What's the purpose of you fixing multiple bugs and security holes if you dont spend time to make it available to the broader audience?"

We are obviously all just too lazy.

https://github.com/curl/curl/issues/13546

@a we should just eagerly spend our spare time to help them earn more money

1. do not assume that URLs will be treated the same cross user-agents.

2. do not assume that IPv4-mapped IPv6-addresses can be written in octal.

Another day. Another security report against #curl we could close.

https://hackerone.com/reports/2493548

I'm happy to say that #curl celebrated its 7th year as hosted by Fastly's CDN network just yesterday.

454 TB of curl website contents were cranked out over the last twelve months. Up 27% from the previous period!

@ryanc 69 (15.7%)

Over the last five years of #curl's bug-bounty we have received 489 submissions. For these 489 submissions the *median* first-response time has been, as calculated by Hackerone: 0 (zero) hours. If this does not ooze of awesomeness from a security team I don't know what does.

I presume they round or truncate to the nearest integer hour. Still means more than half of them got answered within an hour. Whenever or from wherever they were filed.

We take security seriously.

@thejpster curl would not switch protocol unless there is a redirect and you tell curl to follow it. Which this command line does not. The TLS protocol version looks weird to me, as presumably if this is important, why does the server even offer anything lower?

@thejpster @unlambda exactly what I thought.

Nine years ago today, a #curl command line was prominent on an even larger display...

https://daniel.haxx.se/blog/2015/04/24/curl-on-the-nasdaq-tower/

When in my car, I found myself in my car.

#curl is just the hobby

https://daniel.haxx.se/blog/2024/04/22/curl-is-just-the-hobby/

Apparently San Francisco gets to enjoy #curl command lines in ads...