samueloph

6 ms·

1.
Amazon Linux 2027 (Preview)(aws.amazon.com)
3 points by samueloph 13d ago|0 comments
2.
by samueloph 8mo ago
This was patched on time: https://tracker.debian.org/news/1710762/accepted-openssl-354...
3.
by samueloph 11mo ago
> edit: even curl itself - which created the original document linked above - has http 3 just in an experimental build. It's not experimental when built with ngtcp2, which is what you will get on distros like Debian 13-backports (pl
4.
by samueloph 1y ago
You can test it on Debian experimental, or use a Debian container: $ podman run debian:experimental /bin/bash -c 'apt install --update -t experimental -y curl && curl --version' Version 8.13.0~rc3-1+exp1 is synci
5.
by samueloph 2y ago
HTTP/3 is enabled in the curl package on Debian: https://samueloph.dev/blog/debian-curl-now-supports-http3/
6.
by samueloph 2y ago
There's another one: https://github.com/RsyncProject/rsync/issues/715
7.
by samueloph 2y ago
There's a serious regression in the fixes: https://github.com/RsyncProject/rsync/issues/702 It impacts those who need to use `-r` (recursive) together with `-H` (preserve hardlinks),
8.
by samueloph 2y ago
HTTP/3 is enabled in the curl package on Debian: https://samueloph.dev/blog/debian-curl-now-supports-http3/ Daniel also has a more up-to-date post on HTTP/3: https://daniel.haxx.se/blog&#
9.
by samueloph 2y ago
> In unstable you get a timely fix from upstream, in stable you get a fix by the security team. For anything that is serious enough, you will get a security fix straight away for both unstable and testing (through the testing-security re
10.
by samueloph 2y ago
> We should be able to fix this within the next few days, thank you! It's fixed now, should work in non-linux environments.
11.
by samueloph 2y ago
argh, we are looking into fixing that now. I knew getopt was linux-specific but I thoughts the only impact was that the long form argument (--opt) would not work. I turns out it doesn't run at all instead. We should be able to fix this
12.
by samueloph 2y ago
> There is also --remote-header-name (-J) which takes the remote file name from the header instead of the URL, which is what wget does. I don't think that's the case, that behavior is opt-in as indicated in wget's manpage:
13.
by samueloph 2y ago
As others pointed out, you can do that, you can also set them in .curlrc, or you can write a script if you want to allow for multiple URLs to be downloaded in parallel (not possible with an alias), or now you can just use wcurl :) Note: wcu
14.
by samueloph 2y ago
That might be a nice improvement, but I believe people want a single command without any arguments for this use case.
15.
by samueloph 2y ago
"curl --progress-bar" does that "wcurl --opts="--progress-bar" URL" I was wondering if that should be the default for wcurl, but the bar only works for downloading single files, I was afraid of users thinking t
16.
by samueloph 2y ago
> Opens up blog post about pattern matching in Rust. > Not a single "match" statement. This post could increase its reach by explaining why a let statement is pattern matching, or at least point to a reference. Although I un
17.
by samueloph 3y ago
The only issue I have with wayland is that screen sharing from slack does not work (when using the app).
18.
by samueloph 3y ago
That's still an experimental feature on curl's side so I'm not sure. https://everything.curl.dev/helpers/ws/support
19.
by samueloph 3y ago
Nice write-up. I'm one of the Debian maintainers of curl and we are close to enabling http3 on the gnutls libcurl we ship. We have also started discussing the plan for enabling http3 on the curl CLI in time for the next stable release.
20.
by samueloph 3y ago
What's up the the Red Hat mention? One of the first things the presenter says is that his job has nothing to do with this. Edit: mentioning the presenter's name might be better. FTR the video is titled: "Glorious Eggroll (Pro
21.
by samueloph 3y ago
RedHat is one of the subscribers of the mailing list where the CVE details were sent under embargo, so yes, they were bound to that and broke the embargo 13 hours earlier than the lift date.
22.
by samueloph 3y ago
Debian can't really directly pay contributors (there are some rare few cases like lawyers, etc....), so that would be one of the reasons for what the article is talking about. The best thing someone could do in this scenario would to b
23.
by samueloph 3y ago
> Debian Jessie is terribly out of date and hasn't seen regular security updates for five years now, from https://www.debian.org/releases/jessie/ : Nowadays you get 10 years of support if you make use of th
24.
The curl website now features text alerting about NVD “abuse”(twitter.com)
2 points by samueloph 3y ago|2 comments
25.
by samueloph 3y ago
"Alert: if you look up curl CVEs in public sources like NVD you will find they use inflated severity levels and CVSS scores. They think they know better and override our assessments. This is a systemic error that we unfortunately canno
26.
by samueloph 3y ago
> But that’s only if you count the starting year as 1993; Red Hat the actual company seems to have been started in 1995, from what I read. In that case, they would have been 28 years old today. The distro was not created before 1994 eith
27.
by samueloph 4y ago
Two settings I always set in my .inputrc which are not listed in the page: # Make autocompletion case insensitive and display suggestions after single tab. # https://bugs.debian.org/990353 set completion-ignore-case O
28.
by samueloph 4y ago
Wow, two brand new fonts in 2022 and they still make lowercase "l" look exactly like uppercase "i", I thought we were past that by now :(
29.
by samueloph 4y ago
I'm starting to question my understanding of algorithmic complexity, the author says things like "complexity being worst case O(n \log n)" and seems to talk about big O notation used for average cases as well. I've learn
30.
by samueloph 5y ago
If you're interested in Portuguese in general, I suggest listening to Azorean Portuguese. It's so different it sounds like a different language to most Brazilians (and I assume to other nationalities as well), https://w

More ›