in case you too want to cross-stitch it
1. curl is not made by me alone. I lead the project, we are over a *thousand* authors in total
2. I work full-time on providing curl support to paying customers. Some would call it a business.
3. Not "a" billion people. More like 6 billion or so; every human on the globe that is Internet-connected uses things that use curl - daily.
@bagder Your work (and those of the thousands of other authors) is greatly appreciated for over two decades. Thank you. 🙏

@bagder

I love this hot take:
"We established already that you do not care one bit about actual security (even the White House got the memo that C is not a programming language one should use anymore)."

Oh, good to know, random commenter. Let me switch a codebase of 28 years to another language. Because that is reasonable. 

@wakame @bagder
A complete rewrite of a project has never introduced new bugs. A complete rewrite _in a new language_ is easy.

/s

@dmaonR @bagder

Netscape's decision to completely rewrite their browser was obviously the right one. /s

@bagder what? misinformation on *my* fediverse?!

D:

@bagder

One Billion? Seems a bit low? 🙂🤷‍♂️

@simonzerafa it's almost like one of these "how many errors can you find in a short single sentence"

@bagder

Indeed!

Is there anyway to qualify curl usage anyway?

Probably not? 🙂

@simonzerafa not with any precision, I do rough estimations based on products, apps, tools and devices I know run it, but it's very finger-in-the-air

@bagder I regularly run curl just for the heck of it, for no reason.

but much like spider georg, I suspect I'm a statistical outlier who should not be counted @simonzerafa

@bagder on a more serious note, and to be clear in my book this does not apply to curl, but I'm genuinely worried about software packages maintained by a single, un(der)paid developer that have by a cruel twist of fate become the de facto standard everyone uses for A Thing - the most high-profile example being Werner Koch and gpg, and his dire-ish financial situation in the mid 2010s
@simonzerafa
@bagder Out of context that sentence sounds more like an appeal to XKCD 2347
the Apple curl security incident 12604

tldr: Apple thinks it is fine. I do not. On December 28 2023, bugreport 12604 was filed in the curl issue tracker. We get a lot issues filed most days so this fact alone was hardly anything out of the ordinary. We read the reports, investigate, ask follow-up questions to see what we can learn … Continue reading the Apple curl security incident 12604 →

daniel.haxx.se
@bagder work Wouldn't A *patch* work version be relevant?
@bagder the world if cURL had a GUI
@nrk9819 @bagder I think that’s what the world would look like if cURL was rewritten in Rust 😂
@jornane @bagder lemme open a issue and propose for a complete rewrite in rust 🤣🤣
@bagder Sell a merch with this on it. I bet that a lot of people will buy it!

@bagder

Yours on the front of your shirt, this one on the back:

@bagder honestly I think you are missing a line of merch here, I want salty curl hoodies...😂
@bagder Even though trillion dollar companies try to demand priority support from him (for free!)

@bagder what a nice guy this frisian is.

Maybe he learns at some point to think a moment or twice before posting mental diarrhea online in the future.

@bagder @pluralistic Since the guy that posted the original has a Dutch name, I want it on a Delfts Blauw wall tile. #Tegeltjeswijsheid
@jornane @bagder @pluralistic Frisian, apparently! Vewy different 😉
@bagder I wonder if there is even a single curl criticism that has made its way to you without passing through curl code...
@bagder say no more, fam!
@bagder Let's do this.
Hey @bagder, I made a decorative pillow out of it for you, if you want 🫠 #CrossStitch
@LangerJan I love those flowers, they really take this to the next level!
@bagder you can either have it or I’ll ask you to sign it some time 😅
@bagder https://xkcd.com/2347 is about imagemagick, but curl also fits that spot
Dependency

xkcd