@icing@chaos.social
@icing@chaos.social avatar

icing

@icing@chaos.social

Apache httpd and curl project member, HTTP/2, HTTP/3, Lets Encrypt implementations. Likes to code.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

icing, to random
@icing@chaos.social avatar

I started a discussion about making curl -vv ... act as a shortcut for more tracing information. Your views on this as curl user are appreciated:

https://github.com/curl/curl/discussions/13810

icing, to random
@icing@chaos.social avatar

Sometimes we forget what a marvel 'git' really is. Just did

git show <commit-id>

and it pulled out a curl change from 16 years ago in the fraction of a second.

Hat off to its makers and maintainers!

jpmens, (edited ) to random
@jpmens@mastodon.social avatar

"Because of the lack of clear signals of general adoption of DNSSEC over three decades, is it time to acknowledge that DNSSEC is just not going anywhere? Is it time to call it a day for DNSSEC and just move on?"

https://blog.apnic.net/2024/05/28/calling-time-on-dnssec/

icing,
@icing@chaos.social avatar

@jpmens Me not smart enough. What does Mr Mens think?

jpmens, to random
@jpmens@mastodon.social avatar

We need you to sign this NDA for the training you'll be doing next week.

Jesus. Fucking. Christ. People; think before you write.

icing,
@icing@chaos.social avatar

@jpmens teaching secrets again, are we?

icing,
@icing@chaos.social avatar

@jpmens Related to the recent CVEs, we should have kept the DNS ports secret. Right @ondrej ?

bagder, to random
@bagder@mastodon.social avatar

use right now:

Firefox beta 121: 28% of all HTTP

w3techs: 29.7% of the top-1M websites

Cloudflare: 30.0% of monitored web traffic

image/jpeg
image/jpeg

icing,
@icing@chaos.social avatar

@bagder I tried HTTP/3 but it‘s no improvement. The websites are the same as with HTTP/1.💁🏻‍♂️

xahteiwi, to random
@xahteiwi@mastodon.social avatar

The fact that the conference network's DNS server is returning NXDOMAIN on reveal-multiplex.glitch.me is messing with my reveal.js slide deck today.

icing,
@icing@chaos.social avatar

@xahteiwi I always use only a local copy of js frameworks in my presentations. I like them to remain viewable in the upcoming years, for one.

icing, to random
@icing@chaos.social avatar

Another nice graph from the curl dashboard:

https://curl.se/dashboard1.html#vulns-releases

jpmens, to random
@jpmens@mastodon.social avatar

Sure I make fun of iTerm2 containing code to chatgpt and will likely continue doing so, but it’s opt-in so no reason for me to stop using the very good program.

icing,
@icing@chaos.social avatar

@jpmens I looked at the alternatives and am sticking with it for now.

I would wish they'd remove the AI integration again, but it's their free project.

icing,
@icing@chaos.social avatar

@jpmens Tried the fork, did not work at all for me, meaning it just did not work.

icing, to random
@icing@chaos.social avatar

I admit, I am not a Teams player.😌

icing, to random
@icing@chaos.social avatar

duckduckgo still not working. Looks like a deployment at scale without rollback options...

My condolences to the poor ops people sweating on this now...

Update: to be precise, DDG fails because Bing is not working.

bagder, to random
@bagder@mastodon.social avatar

How to verify a release

https://daniel.haxx.se/blog/2024/05/23/how-to-verify-a-curl-release/

How we are not the next xz.

icing,
@icing@chaos.social avatar

@nblr @bagder wow! good for you!😍

icing, to random
@icing@chaos.social avatar

Very happy to live in the EU, for various reasons.

icing, to random
@icing@chaos.social avatar

Law enforcement and your employer will not demand access to your Windows Recall model, right?

Microsoft must have thought that through, for sure.

icing, to random
@icing@chaos.social avatar

A lot of „typical techbro“ behaviour can be better described as „addicts‘ overconfidence“ while high.

Current case: the lack of a plan to deal with Scarlett Johansson‘s objection to her voice cloning. The public boasting that it is intended to be like „her“.

I could be wrong, of course, and none of the techbros do any drugs.

jpmens, to random
@jpmens@mastodon.social avatar

I'm the chap who only uses two protocols in curl.

icing,
@icing@chaos.social avatar

@jpmens You want us to add DNS queries?😬

icing,
@icing@chaos.social avatar

@jpmens No plans for neither, rest assured. But we‘ll want to retrieve HTTPS records soon…

mnot, to random
@mnot@techpolicy.social avatar

I have changed my desktop resolution and it is messing with my mind

icing,
@icing@chaos.social avatar

@mnot I know about new year resolutions. What are desktop resolutions?

icing, to random
@icing@chaos.social avatar

With 346 PRs being merged into curl I climbed now to position 11 (decimal) on the all-time author list.

I hope some of them have been useful.😌

xahteiwi, to random
@xahteiwi@mastodon.social avatar

Hot take: major rewrites of large parts of a a complex codebase are almost always a mistake.

icing,
@icing@chaos.social avatar

@xahteiwi Let me add: "if you do not have enough test cases nailing down the expected behaviour."

And: "if your rewrite will not allow existing tests to run, it is not a rewrite."

icing, to random
@icing@chaos.social avatar

Since a (very subjective) third of curl's non-trivial issues seem FTP related, I am adding 'ftp' to the things you can enable tracing for.

Why FTP troubles after all these years? It's a protocol with many sharp edges and servers migrating to TLS and then TLSv1.3 show slightly different behaviour.

https://github.com/curl/curl/pull/13580

jpmens, to random
@jpmens@mastodon.social avatar

I've been at it for a few years, but this is a first for me:

wget curl --silent "<https://api.github.com/repos/....../releases/latest>" | jq -r '.assets[].browser_download_url' | egrep ".tar.bz2$"

Whole list of those which need to be copied out of a PDF ...

wget and curl.

icing,
@icing@chaos.social avatar

@jpmens You monster!😌

icing, to random
@icing@chaos.social avatar

https://simonwillison.net/2024/May/8/slop/

jacqueline, to random
@jacqueline@chaos.social avatar

the thing about c++ is you can do

std::numeric_limits&lt;uint32_t&gt;::max()

and be technically correct, portable, more expressive, etc.

or you can just do

UINT32_MAX

which is probably Wrong and Bad in many ways, but has the strong advantage of not sucking ass

icing,
@icing@chaos.social avatar

@jacqueline But what if the maximum value of an unsigned 32bit number ever changes?😉

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • khanakhh
  • kavyap
  • thenastyranch
  • everett
  • tacticalgear
  • rosin
  • Durango
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • InstantRegret
  • Youngstown
  • slotface
  • anitta
  • ethstaker
  • ngwrru68w68
  • cisconetworking
  • modclub
  • normalnudes
  • osvaldo12
  • cubers
  • GTA5RPClips
  • Leos
  • tester
  • megavids
  • provamag3
  • lostlight
  • All magazines
    •