Tootfinder

Uff. Wenn man #curl in #powershell nutzt (aka: nicht das echte curl, sondern ein Wrapper von #Microsoft), dann wird zurückgegebenes Javascript einfach ohne Rückfrage ausgeführt. Was kan…

Ever seen a squirrel curl up & sleep... much less snore? 😁
▶️ Soaking Wet Squirrel Seeks Shelter, Snores All Night Long
https://youtube.com/watch?v=ZI5mBS1jhjY&si=gX3dqkSEfpT8oI_6

“Time and energy that is completely wasted while also hampering our will to live.”
I can relate.
https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/

The end of the curl bug-bounty
tldr: an attempt to reduce the terror reporting. There is no longer a curl bug-bounty program. It officially stops on January 31, 2026. After having had a few half-baked previous takes, in April 2019 we kicked off the first real curl bug-bounty with the help of Hackerone, and while it stumbled a bit at first … Continue reading The end of the curl bug-bounty →

See how tightly she has to curl up, there are too many people on her couch there’s barely enough space for Cat

Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"
The onslaught includes LLMs finding bogus vulnerabilities and code that won’t compile. The project developer for one of the Internet’s most popular networking tools is scrapping its vulnerability reward program after being overrun by a spike in the submission of low-quality reports, much of it AI-generated slop.
🤖

Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"
The onslaught includes LLMs finding bogus vulnerabilities and code that won't compile.

Workout of the day.

RE: https://mastodon.social/@MannyCalavera/115852773766275035
Curl into a remote fist to punch fascists in the face!

🇺🇦 #NowPlaying on #BBC6Music's #GuyGarveysFinestHour
Bridget St. John:
🎵 Curl Your Toes
#BridgetStJohn
https://open.spotify.com/track/4lyz4vCpZe2j3p7CpKvE4G

It is 2025 and projects want me to curl an url to install. #dontcurlthaturl

Two cats (Clove & Erie) were sleeping next to me in bed. Twig, who is the youngest cat of the group, hops on the bed and wakes them both up by BITING THEIR FACES, one at a time. Then he's like "let's cuddle!", tries to curl up next to them, and they both hiss/swat at him.
Now he's downstairs, meowing/crying loudly. What a doofus!
#CatDrama

The curl project plans to end its HackerOne bug bounty program at the end of January, citing a surge in low-quality AI-generated vulnerability reports (Lawrence Abrams/BleepingComputer)
https://www.bleepingcomputer.com/news/securi…

"A package’s value isn’t primarily its implementation code. Anyone can rewrite curl in Rust in a weekend, as Daniel Stenberg has heard many times. What they can’t rewrite is the twenty years of bug reports, the weird edge cases someone hit in production and took the time to fix, the arguments in issue threads that eventually settled on the right behavior. That knowledge is spread across the package’s history and it grew organically. No prompt captures it."
https://nesbitt.io/2026/01/30/will-ai-make-package-managers-redundant.html
Excellent piece by @…

curl 3.11 for Workgroups

Don't miss today's packed Metacurity for the most critical infosec developments you need to know, including
--DOGE workers shared SSN data with outsiders, derailed DISA operations,
--UK launches national fraud reporting service,
--China blames Taiwan for cyberattacks,
--EU proposes freezing out Chinese tech suppliers,
--New Zealand launches Manage My Health breach probe,
--Curl ends its bug bounty program due to AI flood,
--Cloudflare fixes WAF…

DOGE workers shared SSN data with outsiders, derailed DISA operations
UK launches national fraud reporting service, China blames Taiwan for cyberattacks, EU proposes freezing out Chinese tech suppliers, New Zealand launches Manage My Health breach probe, Curl ends its bug bounty program due to AI flood, Cloudflare fixes WAF flaw, much more

I'm going to put on a Hawaiian shirt, curl into a fetal position, and play "Walking on Sunshine" on a continuous loop until I believe it's warmer than it actually is. It's gotta work.

🇺🇦 #NowPlaying on KEXP's #VarietyMix
Laika:
🎵 Shut Off / Curl Up (Cabbage Boy Remix)
#Laika
https://laikaofficial.bandcamp.com/track/shut-off-curl-up
https://open.spotify.com/track/7nBNm9tOht5bqKiRv1rkvv

"strncpy() is a weird function with a crappy API."
good thing I don't do C 🙃
Seriously though - projects defining their own strc(o)py do mean flaws in a standard library.
https://daniel.haxx.se/blog/2025/12/29/no-strcpy-either/

no strcpy either
Some time ago I mentioned that we went through the curl source code and eventually got rid of all strncpy() calls. strncpy() is a weird function with a crappy API. It might not null terminate the destination and it pads the target buffer with zeroes. Quite frankly, most code bases are probably better off completely … Continue reading no strcpy either →

I wonder if there is a list of websites that support
curl -H "Accept: text/markdown" aka serving markdown directly.
then there could actually be a "browser" on remarkable tablets.
I also still wonder how firefox does the "read mode"

Idea: a moltbot that agentically finds shell scripts online and `curl | bash`es them as root to see what they do

here's my new solution for "i need to send a file to someone and i really don't want them to need anything but the browser"
unsurprisingly, it uses https://codeberg.org/git-pages/git-pages

Last workout of the year.

Ok, das hatte ich auch noch nicht:
Mein Mailprogramm konnte plötzlich nicht mehr zu em bestimmten Mailkonto¹ verbinden. Kommt vor. Ich betreib den Server selbst, mach mich also an's Debuggen, seh aber nichts in den Logs.² Ich schau in die Fehlerkonsole, probier curl³, telnet, … keine Ausgaben, einfach keine Verbindung.
Im lokalen Subnetz des Servers geht IMAP, auch per Proxy, nur von mir zu Hause nicht. Also bau ich ein VPN, und hoppla, curl über IPv6 geht, über IPv4 nicht…<…

Welp, from my PoV, all sides are wrong.
There is a difference between bug reports generated by AI to spam curl devs and AI generated bug reports sent by Google to FFmpeg devs that are accurate. Calling them slop is hardly true.
"We would rather not know there is a vulnerability in our software" is a terrible take.
Also, I would like to say that maybe it is unreasonable for a software with so little funding to want to support all codecs that were ever invented becaus…

@… Well, are we sure no intelligence agency is so interested in curl that they’re making backups of your emails as well? 😂

Dora, the kitten, likes to nap in bowls. You might even say it's adorable...

Workout of the day.

Workout of the day.

Workout of the day.