@icing@chaos.social
@icing@chaos.social avatar

icing

@icing@chaos.social

Apache httpd and curl project member, HTTP/2, HTTP/3, Lets Encrypt implementations. Likes to code.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

jpmens, to random
@jpmens@mastodon.social avatar

We need you to sign this NDA for the training you'll be doing next week.

Jesus. Fucking. Christ. People; think before you write.

icing,
@icing@chaos.social avatar

@jpmens teaching secrets again, are we?

icing,
@icing@chaos.social avatar

@jpmens Related to the recent CVEs, we should have kept the DNS ports secret. Right @ondrej ?

bagder, to random
@bagder@mastodon.social avatar

use right now:

Firefox beta 121: 28% of all HTTP

w3techs: 29.7% of the top-1M websites

Cloudflare: 30.0% of monitored web traffic

image/jpeg
image/jpeg

icing,
@icing@chaos.social avatar

@bagder I tried HTTP/3 but it‘s no improvement. The websites are the same as with HTTP/1.💁🏻‍♂️

xahteiwi, to random
@xahteiwi@mastodon.social avatar

The fact that the conference network's DNS server is returning NXDOMAIN on reveal-multiplex.glitch.me is messing with my reveal.js slide deck today.

icing,
@icing@chaos.social avatar

@xahteiwi I always use only a local copy of js frameworks in my presentations. I like them to remain viewable in the upcoming years, for one.

jpmens, to random
@jpmens@mastodon.social avatar

Sure I make fun of iTerm2 containing code to chatgpt and will likely continue doing so, but it’s opt-in so no reason for me to stop using the very good program.

icing,
@icing@chaos.social avatar

@jpmens I looked at the alternatives and am sticking with it for now.

I would wish they'd remove the AI integration again, but it's their free project.

icing,
@icing@chaos.social avatar

@jpmens Tried the fork, did not work at all for me, meaning it just did not work.

bagder, to random
@bagder@mastodon.social avatar

How to verify a release

https://daniel.haxx.se/blog/2024/05/23/how-to-verify-a-curl-release/

How we are not the next xz.

icing,
@icing@chaos.social avatar

@nblr @bagder wow! good for you!😍

icing, to random
@icing@chaos.social avatar

Another nice graph from the curl dashboard:

https://curl.se/dashboard1.html#vulns-releases

icing, to random
@icing@chaos.social avatar

duckduckgo still not working. Looks like a deployment at scale without rollback options...

My condolences to the poor ops people sweating on this now...

Update: to be precise, DDG fails because Bing is not working.

icing, to random
@icing@chaos.social avatar

Very happy to live in the EU, for various reasons.

icing, to random
@icing@chaos.social avatar

I admit, I am not a Teams player.😌

icing, to random
@icing@chaos.social avatar

Law enforcement and your employer will not demand access to your Windows Recall model, right?

Microsoft must have thought that through, for sure.

icing, to random
@icing@chaos.social avatar

A lot of „typical techbro“ behaviour can be better described as „addicts‘ overconfidence“ while high.

Current case: the lack of a plan to deal with Scarlett Johansson‘s objection to her voice cloning. The public boasting that it is intended to be like „her“.

I could be wrong, of course, and none of the techbros do any drugs.

jpmens, to random
@jpmens@mastodon.social avatar

I'm the chap who only uses two protocols in curl.

icing,
@icing@chaos.social avatar

@jpmens You want us to add DNS queries?😬

icing,
@icing@chaos.social avatar

@jpmens No plans for neither, rest assured. But we‘ll want to retrieve HTTPS records soon…

mnot, to random
@mnot@techpolicy.social avatar

I have changed my desktop resolution and it is messing with my mind

icing,
@icing@chaos.social avatar

@mnot I know about new year resolutions. What are desktop resolutions?

jacqueline, to random
@jacqueline@chaos.social avatar

the thing about c++ is you can do

std::numeric_limits<uint32_t>::max()

and be technically correct, portable, more expressive, etc.

or you can just do

UINT32_MAX

which is probably Wrong and Bad in many ways, but has the strong advantage of not sucking ass

icing,
@icing@chaos.social avatar

@jacqueline But what if the maximum value of an unsigned 32bit number ever changes?😉

jpmens, to random
@jpmens@mastodon.social avatar

I've been at it for a few years, but this is a first for me:

wget curl --silent "<https://api.github.com/repos/....../releases/latest>" | jq -r '.assets[].browser_download_url' | egrep ".tar.bz2$"

Whole list of those which need to be copied out of a PDF ...

wget and curl.

icing,
@icing@chaos.social avatar

@jpmens You monster!😌

xahteiwi, to random
@xahteiwi@mastodon.social avatar

Hot take: major rewrites of large parts of a a complex codebase are almost always a mistake.

icing,
@icing@chaos.social avatar

@xahteiwi Let me add: "if you do not have enough test cases nailing down the expected behaviour."

And: "if your rewrite will not allow existing tests to run, it is not a rewrite."

icing, to random
@icing@chaos.social avatar

With 346 PRs being merged into curl I climbed now to position 11 (decimal) on the all-time author list.

I hope some of them have been useful.😌

icing, to random
@icing@chaos.social avatar

Since a (very subjective) third of curl's non-trivial issues seem FTP related, I am adding 'ftp' to the things you can enable tracing for.

Why FTP troubles after all these years? It's a protocol with many sharp edges and servers migrating to TLS and then TLSv1.3 show slightly different behaviour.

https://github.com/curl/curl/pull/13580

icing, to random
@icing@chaos.social avatar

https://simonwillison.net/2024/May/8/slop/

icing, to random
@icing@chaos.social avatar

When people say parsing URLs is easy, they are probably convinced that at least parsing IP addresses is easy as well?

You can write 8.8.8.8 as 010.8.8.8 - same thing. But what is then ::ffff:010.8.8.8?

macOS say it is 10.8.8.8 and Linux rejects it as invalid.

All very easy...

icing, to random
@icing@chaos.social avatar

Slides from my curl-up 2024 presentations. The videos are better if you want to understand them, but in case you like better resolution, here they are:

https://eissing.org/curlup-2024/performance/
https://eissing.org/curlup-2024/evolution/

icing, to random
@icing@chaos.social avatar

The curl-up talk (with bad audio but somewhat working subttiles) on how we improved curl's h2 performance: https://youtu.be/4eBAzi7D_WM

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • kavyap
  • thenastyranch
  • ethstaker
  • osvaldo12
  • mdbf
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • Youngstown
  • ngwrru68w68
  • slotface
  • GTA5RPClips
  • rosin
  • megavids
  • cubers
  • everett
  • cisconetworking
  • tacticalgear
  • anitta
  • khanakhh
  • normalnudes
  • Durango
  • modclub
  • tester
  • provamag3
  • Leos
  • lostlight
  • All magazines
    •