Episode 399 - Curl, Security, and Daniel Stenberg

<p dir="auto"><a href="https://infosec.exchange/@joshbressers" rel= "nofollow">Josh</a> and <a href= "https://infosec.exchange/@kurtseifried" rel="nofollow">Kurt</a> talk to Daniel Stenberg about curl. Daniel is the creator of curl, we chat with him about the security of curl. Daniel tells us how curl is kept secure, we learn about some of the historical reasons curl works the way it does. We hear the story about the curl CVE situation firsthand. We also touch on the importance of curating the community of a popular open source project.</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href="https://mastodon.social/@bagder" rel= "nofollow">Daniel's Mastodon account</a></li> <li><a href="https://curl.se/" rel="nofollow">Curl</a></li> <li><a href= "https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/" rel="nofollow">The curl CVE blog</a></li> <li><a href="https://github.com/PowerShell/PowerShell/pull/1901" data-hovercard-type="pull_request" data-hovercard-url= "/PowerShell/PowerShell/pull/1901/hovercard">Broken curl on PowerShell</a></li> <li><a href="https://www.wolfssl.com/" rel= "nofollow">wolfSSL</a></li> </ul>