Viewing profile — samueloph

This was patched on time: https://tracker.debian.org/news/1710762/accepted-openssl-354...

> edit: even curl itself - which created the original document linked above - has http 3 just in an experimental build. It's not experimental when built with ngtcp2, which is what …

You can test it on Debian experimental, or use a Debian container: $ podman run debian:experimental /bin/bash -c 'apt install --update -t experimental -y curl && curl --version' Ve…

HTTP/3 is enabled in the curl package on Debian: https://samueloph.dev/blog/debian-curl-now-supports-http3/

There's another one: https://github.com/RsyncProject/rsync/issues/715

There's a serious regression in the fixes: https://github.com/RsyncProject/rsync/issues/702 It impacts those who need to use `-r` (recursive) together with `-H` (preserve hardlinks…

HTTP/3 is enabled in the curl package on Debian: https://samueloph.dev/blog/debian-curl-now-supports-http3/ Daniel also has a more up-to-date post on HTTP/3: https://daniel.haxx.se…

> In unstable you get a timely fix from upstream, in stable you get a fix by the security team. For anything that is serious enough, you will get a security fix straight away for b…

> We should be able to fix this within the next few days, thank you! It's fixed now, should work in non-linux environments.

argh, we are looking into fixing that now. I knew getopt was linux-specific but I thoughts the only impact was that the long form argument (--opt) would not work. I turns out it do…

> There is also --remote-header-name (-J) which takes the remote file name from the header instead of the URL, which is what wget does. I don't think that's the case, that behavior…

As others pointed out, you can do that, you can also set them in .curlrc, or you can write a script if you want to allow for multiple URLs to be downloaded in parallel (not possibl…

That might be a nice improvement, but I believe people want a single command without any arguments for this use case.

"curl --progress-bar" does that "wcurl --opts="--progress-bar" URL" I was wondering if that should be the default for wcurl, but the bar only works for downloading single files, I …

> Opens up blog post about pattern matching in Rust. > Not a single "match" statement. This post could increase its reach by explaining why a let statement is pattern matching, or …

The only issue I have with wayland is that screen sharing from slack does not work (when using the app).

That's still an experimental feature on curl's side so I'm not sure. https://everything.curl.dev/helpers/ws/support

Nice write-up. I'm one of the Debian maintainers of curl and we are close to enabling http3 on the gnutls libcurl we ship. We have also started discussing the plan for enabling htt…

What's up the the Red Hat mention? One of the first things the presenter says is that his job has nothing to do with this. Edit: mentioning the presenter's name might be better. FT…

RedHat is one of the subscribers of the mailing list where the CVE details were sent under embargo, so yes, they were bound to that and broke the embargo 13 hours earlier than the …

Debian can't really directly pay contributors (there are some rare few cases like lawyers, etc....), so that would be one of the reasons for what the article is talking about. The …

> Debian Jessie is terribly out of date and hasn't seen regular security updates for five years now, from https://www.debian.org/releases/jessie/ : Nowadays you get 10 years of sup…

"Alert: if you look up curl CVEs in public sources like NVD you will find they use inflated severity levels and CVSS scores. They think they know better and override our assessment…

> But that’s only if you count the starting year as 1993; Red Hat the actual company seems to have been started in 1995, from what I read. In that case, they would have been 28 yea…