@icing@chaos.social
@icing@chaos.social avatar

icing

@icing@chaos.social

Apache httpd and curl project member, HTTP/2, HTTP/3, Lets Encrypt implementations. Likes to code.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

icing, to random
@icing@chaos.social avatar

Sometimes we forget what a marvel 'git' really is. Just did

git show <commit-id>

and it pulled out a curl change from 16 years ago in the fraction of a second.

Hat off to its makers and maintainers!

icing, to random
@icing@chaos.social avatar

Another nice graph from the curl dashboard:

https://curl.se/dashboard1.html#vulns-releases

icing, to random
@icing@chaos.social avatar

I admit, I am not a Teams player.😌

icing, to random
@icing@chaos.social avatar

duckduckgo still not working. Looks like a deployment at scale without rollback options...

My condolences to the poor ops people sweating on this now...

Update: to be precise, DDG fails because Bing is not working.

icing, to random
@icing@chaos.social avatar

Very happy to live in the EU, for various reasons.

icing, to random
@icing@chaos.social avatar

Law enforcement and your employer will not demand access to your Windows Recall model, right?

Microsoft must have thought that through, for sure.

icing, to random
@icing@chaos.social avatar

A lot of „typical techbro“ behaviour can be better described as „addicts‘ overconfidence“ while high.

Current case: the lack of a plan to deal with Scarlett Johansson‘s objection to her voice cloning. The public boasting that it is intended to be like „her“.

I could be wrong, of course, and none of the techbros do any drugs.

icing, to random
@icing@chaos.social avatar

With 346 PRs being merged into curl I climbed now to position 11 (decimal) on the all-time author list.

I hope some of them have been useful.😌

icing, to random
@icing@chaos.social avatar

Since a (very subjective) third of curl's non-trivial issues seem FTP related, I am adding 'ftp' to the things you can enable tracing for.

Why FTP troubles after all these years? It's a protocol with many sharp edges and servers migrating to TLS and then TLSv1.3 show slightly different behaviour.

https://github.com/curl/curl/pull/13580

icing, to random
@icing@chaos.social avatar
icing, to random
@icing@chaos.social avatar

When people say parsing URLs is easy, they are probably convinced that at least parsing IP addresses is easy as well?

You can write 8.8.8.8 as 010.8.8.8 - same thing. But what is then ::ffff:010.8.8.8?

macOS say it is 10.8.8.8 and Linux rejects it as invalid.

All very easy...

icing, to random
@icing@chaos.social avatar

Slides from my curl-up 2024 presentations. The videos are better if you want to understand them, but in case you like better resolution, here they are:

https://eissing.org/curlup-2024/performance/
https://eissing.org/curlup-2024/evolution/

icing, to random
@icing@chaos.social avatar

The curl-up talk (with bad audio but somewhat working subttiles) on how we improved curl's h2 performance: https://youtu.be/4eBAzi7D_WM

icing, to random
@icing@chaos.social avatar

Talking about Evolution in curl over the last 2 years at curl up 2024 in a couple of minutes. Live at twitch channel curlhacker.

icing, to random
@icing@chaos.social avatar

Yep, Stockholm.

icing, to random
@icing@chaos.social avatar

If you have an S3 bucket and someone touches it - even when only getting a „403 Access Denied“ - it makes ding on your credit card.😬
https://chaos.social/@jonty/112356533762691820

icing, to random
@icing@chaos.social avatar

AI companies claim they are unable to correct false data in LLMs. (I think that is a false claim - it pbly is highly expensive, though.)

This clashes with EU law that information about individuals - if you claim to have it - needs to be accurate. Which seems like a sane thing to me.

https://noyb.eu/en/chatgpt-provides-false-information-about-people-and-openai-cant-correct-it

icing, to random
@icing@chaos.social avatar

I do not trust passkeys, because I seem no longer to be the one controlling the access.

Instead google or apple are.

Sure, they ask me for my face or thumb, but my brain is no longer a vital part of the process.

I can understand that companies might prefer that. The medium failure rate will be much better the more employees you have.

But for me as an individual the failure impact seems catastrophic, or at least unclear how to mitigate.

icing, to random
@icing@chaos.social avatar

"What happened?"
"My CIs started failing..."

"Ah, it was a commit and run!"

icing, to random
@icing@chaos.social avatar

Annoying day: github dropped new macOS images, defaults to ARM, which has other paths for homebrew, which brings a new python version which refuses pip installs. Ah, and the brew openssl's pkgconfig is broken.

Punch card debugging...

icing, to random
@icing@chaos.social avatar

I‘ll never visit the US again: if you make it past the cavity searchers at immigration, you can meet the legal owners of flame-throwing robot dogs, after which medical services will try to bankrupt you.🙈

https://arstechnica.com/gadgets/2024/04/you-can-now-buy-a-flame-throwing-robot-dog-for-under-10000/

icing, to random
@icing@chaos.social avatar

I have not heard about rich people replacing their tax consultants with AI.

Which should be easy for a chat AI to do, filling out some forms.

Wonder what is holding that back?🤔

icing, to random
@icing@chaos.social avatar

I propose to remove mod_tls from Apache 2.4.x again. The rustls API keeps on changing and I do not have the time to keep up with that.

If someone wants to step in, feel free to add your voice to the httpd dev mailing list.

https://lists.apache.org/thread/hkbcqw3lblswrc20ymg9dp8ncjtbcbon

icing, to random
@icing@chaos.social avatar

Slack, t'was not always nice knowing you - but whatever.💁🏻‍♂️

icing, to random
@icing@chaos.social avatar

Lets Encrypt will change cert chains soon. If you pin intermediates or root certs, you need to adapt.

Note that LE plans to expire intermediates every year, going forward. Because it is the only way to make this work.

People are very good at adapting to constant change, but will fight tooth and nail to ignore something several years in the future.

https://letsencrypt.org/2024/04/12/changes-to-issuance-chains.html

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • normalnudes
  • DreamBathrooms
  • ngwrru68w68
  • khanakhh
  • Durango
  • magazineikmin
  • Youngstown
  • everett
  • rosin
  • slotface
  • mdbf
  • kavyap
  • cubers
  • JUstTest
  • osvaldo12
  • InstantRegret
  • tacticalgear
  • ethstaker
  • cisconetworking
  • thenastyranch
  • GTA5RPClips
  • Leos
  • modclub
  • tester
  • anitta
  • provamag3
  • lostlight
  • All magazines