The Curious Engineer

All blogs / Networking

daniel.haxx.se

daniel.haxx.se/blog

curl, open source and networking

NetworkingCSecurityLinux / Unix

’10’15’20’25
Posts
1,607 from 28 Aug 2007 to 22 Oct 2026
Posting
weekly (65 in the last year)
Kind
personal blog
Feed
https://daniel.haxx.se/blog/feed/

Latest

October 2026

  1. “ignore the slop”
  2. Do minor curl vulnerabilities in the open
  3. OSI approved the curl license
  4. A curl audit by Aisle
  5. A UAF turned RCE
  6. curl 8.23.0
  7. A slightly faster slimmer curl
  8. The 2026 curl team
  9. Twenty-two pending curl vulnerabilities

September 2026

  1. 25 years on Apple computers
  2. curl 8.22.0

August 2026

  1. There’s a libcurl.dll in my system32
  2. curl performance
  3. What the bliss taught us

July 2026

  1. HTTP Message Signatures with curl
  2. 1,500 curl authors
  3. Workshop Basel day three
  4. Workshop Basel day two
  5. Workshop Basel day one

June 2026

  1. Do excellent vulnerability reports
  2. A curl mountain movie
  3. Trailing dots are the worst
  4. a CVE dispute
  5. curl 8.21.0
  6. QUERY with curl
  7. curl summer of bliss
  8. A human in control

May 2026

  1. curl up 2026 summary
  2. The pressure
  3. named globs with curl
  4. Mythos finds a curl vulnerability

April 2026

  1. Approaching zero bugs?
  2. Inspired
  3. curl 8.20.0
  4. High-Quality Chaos

March 2026

  1. Don’t trust, verify
  2. One hundred weirdo emails
  3. NTLM and SMB go opt-in
  4. bye bye RTMP
  5. One hundred curl graphs
  6. chicken nuget
  7. curl 8.19.0
  8. Dependency tracking is hard
  9. 10K curl downloads per year

February 2026

  1. curl up 2026
  2. curl security moves again
  3. decomplexification continued
  4. Open Source security in spite of AI
  5. A third medal

January 2026

  1. GregKH awarded the Prize for Excellence in Open Source 2026
  2. curl distro meeting 2026
  3. Improving curl -J
  4. The end of the curl bug-bounty
  5. libcurl memory use some years later
  6. Now with MQTTS
  7. My first 20,000 curl commits
  8. More HTTP/3 focus, one backend less
  9. curl 8.18.0
  10. 6,000 curl stickers

December 2025

  1. no strcpy either
  2. A curl 2025 review
  3. 20,000 issues on GitHub

November 2025

  1. Parsing integers in C
  2. curl 8.17.0
  3. Yes really, curl is still developed

October 2025

  1. A gold ceremony to remember
  2. On 110 operating systems
  3. AIxCC curl details
  4. A royal gold medal
  5. chart: which host, which protocol
  6. A new breed of analyzers
  7. How I maintain release notes for curl

September 2025

  1. CRA compliant curl
  2. Bye bye Kerberos FTP
  3. From suspicion to published curl CVE
  4. Developer of the year
  5. curl 8.16.0
  6. preparing for the worst
  7. giants, standing on the shoulders of

August 2025

  1. Dropping old OpenSSL
  2. AI slop attacks on the curl project
  3. car brands running curl
  4. HTTP is not simple
  5. curl tells the %time
  6. Follow redirects but differently
  7. c10kday
  8. Even happier eyeballs
  9. curl adds parallel host control

July 2025

  1. option parsing in curl
  2. Output nothing with –out-null
  3. Carving out msh3
  4. Hello Sprout
  5. EU-STF for funding critical Open Source
  6. curl 8.15.0
  7. Death by a thousand slops
  8. How I do it
  9. Sponsor my laptop!
  10. Cybersecurity Risk Assessment Request
  11. more views on curl vulnerabilities
  12. keeping tabs on curl’s memory use
  13. curl user survey 2025 analysis

June 2025

  1. A family of forks
  2. Dropping some TLS laggards
  3. What we can’t measure
  4. curl 8.14.1

May 2025

  1. Decomplexification
  2. curl 8.14.0
  3. The curl user survey 2025 is up
  4. Leeks and leaks
  5. Detecting malicious Unicode
  6. Supported curl versions and end of life
  7. 1k-0036 means sad eyeballs on my LG
  8. curl up 2025 is over

April 2025

  1. How the CNA thing is working out
  2. Summing up the curl distro 2025 meet
  3. Writing C for curl
  4. curl 8.13.0

March 2025

  1. HTTPS RR in curl
  2. curl up 2025
  3. 19000 curl commits
  4. My cookie spec problem

February 2025

  1. Adding curl release candidates
  2. The curl roadmap webinar 2025
  3. A second curl distro meeting 2025
  4. curl website traffic Feb 2025
  5. Changing every line three times
  6. OpenSSL does a QUIC API
  7. curl 8.12.1
  8. disabling cert checks: we have not learned much
  9. curl 8.12.0
  10. European Open Source Achievement Award

January 2025

  1. A 1337 curl author
  2. CVSS is dead to us
  3. Presentation: curl from start to end
  4. Secure Transport support in curl is on its way out

December 2024

  1. curl with partial files
  2. dropping hyper
  3. A twenty-five years old curl bug
  4. curl 8.11.1
  5. Rock-solid curl on video
  6. No need to email me about Cisco AnyConnect

November 2024

  1. Workshop season six, episode three
  2. The 2024 Workshop, day two
  3. The 2024 HTTP Workshop
  4. Rock-solid curl
  5. curl 8.11.0
  6. curl -v google.com

October 2024

  1. curl source code age
  2. Eighteen years of ABI stability
  3. decomplexifying curl

Every year

2026 592025 762024 782023 642022 912021 802020 1132019 592018 482017 512016 572015 672014 592013 292012 492011 712010 712009 1202008 2152007 150