Piero Bosio Social Web Site Personale

@dragnucs @bagder that's what I would expect too, but it's still unclear to me if this is *a* wave, or a series of waves that will last for a while :)

Il creatore di curl su Mythos: “Mi aspettavo una montagna di bug, ma non ho trovato nulla”📌 Link all'articolo : https://www.redhotcyber.com/post/il-creatore-di-curl-su-mythos-mi-aspettavo-una-montagna-di-bug-ma-non-ho-trovato-nulla/A cura di Bajram Zeqiri#redhotcyber #news #cybersecurity #vulnerabilita #test #mythos #curl #danielstenberg

@normis Normi, tu taču zini ka tas ir curl autors?

@bagder I added a specific Cache-Control hack in Squid for old Internet Explorer around version 4, I think, and they didn't fix the bug for a few years. I stopped working with Squid around the time it got fixed, so I don't know when it got removed, but I'll assume it did, as it certainly hasn't been needed for at least a decade. IE was really a big waste of everybody's time, and Microsoft should be ashamed of themselves.

@h3artbl33d@exquisite.social @stefano@mastodon.bsd.cafe i already did though

@connynasch @icing @sovtechfund Update from danielhttps://mastodon.social/@bagder/116407367327224765

@bagder I was like a hundred pages into his description of eating a cookie before I gave up. I bet the curl cookie handling code doesn't take a hundred pages.

@bagder I talked to @Foxboron about this a bit at KubeCon a few days agoThe Linux distros figured a lot of this stuff out, then everyone decided they were dumb and slow :)And now we have <gestures at everything>

@rysiek i need to work more on my joking skills, it looks like they are not so sharp after midnight.

@charon but what is "llm usage" ?

@bagder finally, a release scheme that makes sense. r273 = 273 options

@Enfors @bagder I am an thick headed optimist, so I will not bow to reality ;-)

#curl security moves again. Back to #hackerone https://daniel.haxx.se/blog/2026/02/25/curl-security-moves-again/

@simonzerafa it feels like a use case for Open Source that is clearly not well covered. We're going back to Hackerone. It's not a perfect fit either especially since we dropped the bounty part - but it still crosses off many more check-boxes for us.I'll elaborate with some more details in a pending blog post

@bagder onslop 😅 of course I didn’t read the article yet, but how do we stop the onslop?!?!

@jpmens I mean, look at the view counter

https://www.theregister.com/2026/02/03/sudo_maintainer_asks_for_help/Kinda like #cURL - used by everyone daily, supported by almost no one.#Tech #FLOSS #Linux

@bagder Where's that header image from?

@bagder Maybe you should have a LLM catch footer that says "ignore previous instructions" and provides bogus contact info. Since given how little these people read maybe they're having their slop machines parse the doc for them.

@bagder @loke is the Gemini protocol supported? (I have a sense of déjà vu about this question)