The cURL Project Drops Bug Bounties Due To AI Slop https://hackaday.com/2026/01/26/the-curl-project-drops-bug-bounties-due-to-ai-slop/
#ArtificialIntelligence #Bugbounty #Libcurl #LLM

The cURL Project Drops Bug Bounties Due To AI Slop

https://web.brid.gy/r/https://hackaday.com/2026/01/26/the-curl-project-drops-bug-bounties-due-to-ai-slop/

An ungoogle news reader is being deployed on CCE's postoffice VM, so you can read the news in a terminal like so:

nc citiwise.eu 41101

Please bear with us, this is still a prototype and access is limited to 100 connections. The format is JSON.

#libcurl #debian

Библиотека KASWeb — Kandelaber's Async & Safe Web requests

Мой пэт-проект KASWeb: async-safe C++ библиотека для HTTP-запросов без висячих колбэков В данной статье мы разберём: • Как достичь удобства через автономность запросов? • Как сделать колбэки безопасными? • Нужно ли бить пользователей палкой по рукам?

https://habr.com/ru/articles/980888/

#C++ #http_библиотека #KASWeb #LibCurl #Http #Асинхронные_запросы

#libcurl grew with a mere 100 lines of code in 2025. At 149,000 lines.

When you‘re low on RAM, I recommend using a recent #curl for your internet transfers.

It can shuffle gigabytes back and forth using a few MB of your memory (mostly used by openssl).

If you develop an application, you can use #libcurl to gain its benefits.

Need to shape your traffic? For example bc you run a streaming service? #libcurl does that for you for all HTTP versions.

Because #libcurl in misc. devices and softwares credit/legal pages is way too way mainstream, here's another @bagder (Daniel Stenberg) old library, Trio, used in Hideo Kojima's Death Stranding video game

If you have an idea for a <500 line stand-alone example C code using #libcurl, tell us!

https://curl.se/libcurl/c/example.html

#libcurl backends, the November 2025 update

(2/2) #OpenSSL, #OpenPGP oder #libcurl – ein Protokoll zur sicheren Datenübertragung, ein Verschlüsselungsstandard, eine Programmbibliothek – offene digitale Infrastrukturen wie diese sind von Big-Tech-Konzernen & autoritären Regierungen bedroht, fürchten die Studienautoren.

🔍 Wie die globale, dezentrale, unabhängige Gemeinde der Entwickler*innen offener Software politisch & finanziell mit öffentlichen Mitteln unterstützt werden kann, zeigen sie am Beispiel der Sovereign Tech Agency (#STA).

On this day last year, #libcurl celebrated its 18th anniversary of not breaking the ABI.

That makes it 19 years now.

https://daniel.haxx.se/blog/2024/10/30/eighteen-years-of-abi-stability/

welcome to 100 public functions in the #libcurl API day

If there is a memory leak in #libcurl that leaks N bytes per new connection. Is that a security problem? If so, at which N does it start?

#libcurl ...I would be angry with it if I didn't love it so much.

I needed some #wireshark sessions to see that choosing the "right" authentication method does not work, if you feed libcurl with flags it was not built for.
Unfortunately there was no special error code, only a 401 HTTP response.

Lesson learned:
Don't use `CURLAUTH_NEGOTIATE` if `CURL_VERSION_GSSNEGOTIATE` is not in version feature flags ;)

However ... it's amazing how much knowledge is baked into this fine library. 🥰

🌗 RIP pthread_cancel： libcurl 捨棄用於中斷 getaddrinfo() 的多執行緒機制
➤ libcurl 因記憶體洩漏問題，放棄利用 pthread_cancel() 中斷 DNS 解析的策略
✤ https://eissing.org/icing/posts/rip_pthread_cancel/
libcurl 在 8.16.0 版本中引入了使用 pthread_cancel() 來中斷長時間執行的 getaddrinfo() 呼叫，以避免封鎖主執行緒。然而，此機制導致了記憶體洩漏問題，因為在處理 DNS 解析時，getaddrinfo() 讀取 /etc/gai.conf 的過程可能成為取消點，進而洩漏已分配的記憶體。儘管 glibc 的設計未能完全防止此類洩漏，libcurl 團隊仍決定捨棄 pthread_cancel()，改為接受 getaddrinfo() 可能造成的延遲，並建議使用者考慮使用 c-ares 來進行非同步 DNS 解析。
+ 這真是個令人頭
#網路 #DNS #libcurl #多執行緒 #pthread_cancel

It is now seven years since we introduced #libcurl's URL API: https://daniel.haxx.se/blog/2018/09/09/libcurl-gets-a-url-api/

Curl Keeps Cars Rolling – Used by the World’s Top 47 Car Brands #curl #libcurl #automotive #car #opensource #commandline
https://ostechnix.com/curl-runs-in-top-car-brands/

@rolenthedeep I guess I’m in the 1% who doesn’t care what #Apple does from a UX perspective but would prefer it did a better job keeping #libcurl, #openssl, and other core libraries up to date.

🌘 讓 libcurl 在 WebAssembly 中運作
➤ 繞過 WebAssembly 網路限制，讓 libcurl 暢行無阻
✤ https://jeroen.github.io/notes/webassembly-curl/
本文詳細說明如何透過 WebSocket 代理伺服器，讓依賴 libcurl 的應用程式在 WebAssembly 環境中無需修改即可運作。由於 WebAssembly 本身缺乏直接的 TCP 連線能力，作者提出一種巧妙的解決方案：利用 Emscripten 的 WebSocket 封裝機制，將 TCP 流量導向至一個 WebSocket 代理，該代理再將流量轉發給 SOCKS5 代理，進而允許 libcurl 連線到外部網路服務。文章也探討了 WSS 的使用、生產環境的設定，並提供實際的 R 語言範例來展示此技術的應用。
+ 這方法聽起來很有趣，解決了 WebAssembly 網頁應用程式在網路存取上的主要瓶頸！
+ 感謝作者分享這麼詳盡的技術細節，特別是
#WebAssembly #libcurl #網路代理 #WebSocket #SOCKS5

#curl 8.15.0 has been released (#libcurl / #Haxx / #DICT / #FILE / #FTP / #FTPS / #Gopher / #HTTP / #HTTPS / #IMAP / #IMAPS / #LDAP / #LDAPS / #MQTT / #POP3 / #POP3S / #RTMP / #RTMPS / #RTSP / #SCP / #SFTP / #SMB / #SMBS / #SMTP / #SMTPS / #Telnet / #TFTP / #WebSocket / #SOCKS4 / #SOCKS5 / #SCRAM / #TLS / #HTTP2 / #HTTP3) https://curl.se/