Live data from Hacker News

Curl will not accept vulnerability reports during July 2026

daniel.haxx.se

161–170 of 326 posts

Re: Curl will not accept vulnerability reports during July 2026

#161

The headline buried the lede -- this is a way to get some summer vacation (niiice) AND encourage enterprise support contracts, which will still have availability. I don't think I've heard of this particular open source / support / summer vacation business model before but I like it!

It's an extremely un-European approach. European companies normally ignore their paid customers too from May to August.

I mean, looking at most us company's.. What support?

Re: Curl will not accept vulnerability reports during July 2026

#162
post #159
post #11

For the people here who want to do the same when they are vacation (be completely detached from work): Make it impossible for you to work! Leave your work devices behind! Log out of all accounts, remove 2FA keys after backing them up on paper and tell your partner to not give them back to you for the duration of your vacation, etc. I actually went to a country from which I wasn't allowed to work remotely. Crazy but i…

This seems like a lot of extra work. If at all possible, just keep your work stuff on your work laptop/computer. And then keep that at home/at work. No need to sign in and out of 20 different accounts.

> This seems like a lot of extra work

Music to the ears of a workaholic :)

Seriously, that'd be nice if everyone would do this (and I do it now, very strictly) but I also know how easy for one to start blurring the lines between work and personal lives.

Re: Curl will not accept vulnerability reports during July 2026

#163

Earlier quoted context omitted.

ignore is not the right word.

In Poland smaller companies tell you outright: this and that person is on vacation, but plese call back in 2 weeks. Bigger companies will often ignore you and drag your problem through the vacation time.

> tell you outright

That is not ignoring but announcing a delay.

Bigger companies may have only limited number of people checking the mailboxes in july and august, that doesn't excuse not sending a small reply announcing delays but I guess they take it so much for granted they don't realize other continents aren't used to those kinds of delays. However in May and June every company is totally operational ( that doesn't mean nobody take holidays ). If you request something to one named person, that sole person can have scheduled holidays, parental or medical leave any time of the year. If it is a team mailbox, you should get an answer.

Re: Curl will not accept vulnerability reports during July 2026

#166

Earlier quoted context omitted.

Sick days are not “offered” by employers. Sick days are prescribed by the doctors and there is no upper limit. After all, your sickness will not disappear just because it has been N days. That's at last how it is in Poland.

Sweden has 14 sick days no questions asked before you need a doctors note. The German way of having to call your doctor for a flu note is a little odd to me. You do loose the first day's pay (the meme is that too many people were off sick when there was a world cup finals or something), and then 80% pay.

> You do loose the first day's pay

Many countries have this system and the usual effect is that the duration people are sick for is magically never less than 2 days. It's dumb policy.

Re: Curl will not accept vulnerability reports during July 2026

#167

Earlier quoted context omitted.

Just not bringing the devices should be enough.

I regularly advocate for offline moments so I definitely agree on the "how" ... but that's still not my point though. What I was trying to highlight was that HOW depends on whom you are talking to. Here they just mentioned a deep behavior problem. Saying "just" or "simply" or "should" or "ought to" or anything implying it's really not that hard is probably not going to be encouraging to them.

yeah but I mean it is the same about logging out accounts or removing 2FA which is what I was really replying to.

If that person doesn't have the mental strength to do any action on their own, I totally agree that they probably need therapy first.

Re: Curl will not accept vulnerability reports during July 2026

#168
post #29

Earlier quoted context omitted.

I worry that this will make the bad guys focus on finding zero days during the month they have free to exploit anything they find, but I don't doubt that they need a break.

The bad guys wouldn't have submitted a vuln report anyway.

Actually, submitting hundreds of bogus/low impact AI generated ones while you sit on something big might be a viable strategy to delay a project from fixing a hole you're using

Re: Curl will not accept vulnerability reports during July 2026

#169

Earlier quoted context omitted.

Sweden has 14 sick days no questions asked before you need a doctors note. The German way of having to call your doctor for a flu note is a little odd to me. You do loose the first day's pay (the meme is that too many people were off sick when there was a world cup finals or something), and then 80% pay.

This is not accurate. In Germany, you usually only have to get a doctor's note at 2 or 3 days, if youre only sick for a day or two you don't need one. And there's an unlimited number of sick days. As long as you have a doctor's note, you still get paid, up to some ridiculous limit at which you might have to get government support instead.

It's up to the employer, they can ask for a doctor's note from day 1. Many employers have more lenient rules, though.

Re: Curl will not accept vulnerability reports during July 2026

#170

Earlier quoted context omitted.

I'm surprised, typically we don't all take vacation at the same time, but stagger it.

It really depends on the areas. On white collar jobs yes. It is more frequent in blue collars workers because it is easier to close completely or partially (several lines) in a factory than having to manage different vacations schedules. Constructions companies also do stop because you usually need most workers available + hot weather makes it harder anyway. Small/familiar companies also do it frequently because it d…

I've seen construction companies use all their vacatiom in December in America (since it sucks to work in in the cold)
Post reply on HN