daniel:// stenberg://

I'm putting together a list of big and small issues that makes us (the curl project) considering switching away from GitHub for security reporting/advisories again:

Gist

GitHub Security Advisory wishlist from the curl project

GitHub Security Advisory wishlist from the curl project - GSA-wishlist.md

*considering* being the operative word, nothing has been decided and I think it's fair to give it some more time first. And some communication to see what can be done, fixed or adjusted. To be continued.

New financial contributor to #curl: Open Broadcaster Software ($10,000.00)

Early anecdotal data: turning off the bug-bounty may not make much difference... 😱

the public consultation on "European Open Digital Ecosystems" apparently received 1,658 submissions. One of the biggest public consultations ever apparently. Well done fellow Open Sourcers!

Switching away from Hackerone is not a guarantee... Here we go.

if you search for my name among that huge pile of documents that now show how everyone wanted to hang out with him, you get several hits. Several PDFs that contain the curl license, for various software products it seems. I assume this is exactly how I easily get into trouble. Like sometimes when trying to travel... 😕

I hope I'm not the only one who think that a solid test suite for your project has proven more important than ever. That's the wall crappy AI-generated PRs can't climb over.

Ruth Suehle, me, Deb Bryant, Baddy Sonja (Ólafsdóttir) Breidert, Fabrizia Benini on stage at the EU Open Source Policy Summit last Friday.

More of the same:

console.log()

AI Slopageddon and the OSS Maintainers

AI slop is ripping up the social contract between maintainers and contributors essential to open source development. Practitioners have been repeat...

Open Source security in spite of AI - the recording.

daniel.haxx.se

Open Source security in spite of AI

The title of my ending keynote at FOSDEM February 1, 2026. As the last talk of the conference, at 17:00 on the Sunday lots of people had already le...