When a person files an issue against an eleven year old #curl version, what exactly do they want us to do?

@joshbressers @liw @kurtseifried @gregkh in the case of curl and libcurl, we took on the stance to never break our users very early on. I am convinced it is a reason behind our success. They know they can upgrade without worries.

@err_mus ipod was never the best platform for Rockbox

@err_mus also, the backstory of how the reverse engineering of the first ipod that then eventually ran Rockbox is super awesome. A work of art and patience of steel.

when we had get-togethers of #rockbox hackers, we did these (silly) towers of devices that could run Rockbox. Look at this beautiful example featuring 78 mp3 players.

More photos here: https://www.rockbox.org/wiki/TowerOfRockbox.html

@amazing_snacks @sushee the original author of the Archos firmware used to say he created Rockbox by making the original firmware so bad it triggered us to make an alternative =)

@msfjarvis I had an unhealthy amount of various mp3 players in my possession back then with the sole purpose to verify and test Rockbox on... 🤠

On this day, 22 years ago, the #Rockbox project started, co-founded by me. We wrote an open source firmware for mp3 players. On its 10 year anniversary 2011, I wrote this:

https://daniel.haxx.se/blog/2011/12/07/ten-years-of-rockbox/

After my complaint the NVD hos "downgraded" it to a 7.5 (high).

My response: you are scaremongering. It is not a high either.

CVE-2023-27536

Announced by the #curl project back in March 2023. We deem it severity Low. https://curl.se/docs/CVE-2023-27536.html

NVD, in their infinite wisdom, thinks this is a CRITICAL 9.8 flaw: https://nvd.nist.gov/vuln/detail/CVE-2023-27536

I wish I knew how to fix this annoying problem but talking or whining to NVD certainly does not seem to help.

The most common first names among all #curl commit authors you ask?

19 Michael
12 Daniel
11 Thomas
11 David
10 Tobias
10 Martin
9 Paul
9 John
9 Jan
9 Alex

@stevelord I think he might have missed a little more than that as well! 🙂

"Taran" brings valuable insight into the human psyche: https://daniel.haxx.se/blog/2023/03/20/curl-8-0-1-because-i-jinxed-it/comment-page-1/#comment-26620

"Anatomy of a ghost CVE" https://daniel.haxx.se/blog/2022/03/23/anatomy-of-a-ghost-cve/ - this curl ghost CVE was mentioned on a page for a week and now we get to live with the consequences...

@sjb I don't think you understand what you're asking, but feel free to use whatever you want!

@sjb if all curl does for you is "getting a web page as a string", then you have more to explore...

@sjb it supports 26 protocols, 13 TLS libraries, 3 SSH libraries, 2 HTTP/3 libraries, 5 HTTP versions, many HTTP auth methods, and a stable ABI and API since decades. You'll have to search a long time to find alternatives that can beat that.

1,000 curl commit authors https://daniel.haxx.se/blog/2022/01/30/1000-commit-authors/ - history, numbers, a graph and not the least... a fresh gource video!