@bagder @GossiTheDog

Until recently, I'd always been under the impression that #cURL is "just" a #CLI tool for making #WebRequests, and therefore probably quite simple under the hood, with only a few (if any) very small #AttackSurfaces. Then I started following some #infosec / #cybersecurity researchers, and all of a sudden, I started hearing about a new cURL #CVE, almost every week it seemed.

Two lessons learned:
1. Nothing is ever as simple as it seems.
2. Security researchers are unbelievably smart.