SlideShare a Scribd company logo
Daniel
Stenberg
Feb
1,
2025
Tightening every bolt
Daniel Stenberg @bagder
@mastodon.social
https: daniel.haxx.se
@bagder
Just ask!
An open source project that
makes a command line tool
and a library for transferring
data using Internet protocols
curl.se
We strive to perform best-in-class in every
aspect regarding security and Open Source
AVG Antivirus Crack With Free version Download 2025 [Latest]
NextStep
Minoca
106 operating systems
Syllable OS
TPF
Tizen
Symbian
Tru64
SunOS
tvOS ucLinux
Genode Hurd
iOS
Integrity
Illumos
HP-UX
HardenedBSD
Haiku
z/OS
Nintendo
Switch
NonStop OS
NetWare
MorphOS MPE/iX MS-DOS NCR MP-RAS NetBSD
RISC OS
Redox
ReactOS Sailfish OS
SCO Unix Serenity SINIX-Z
Qubes OS
UnixWare
WebOS
vxWorks
VMS Windows
UNICOS
Windows CE
Wii System
Software
AmigaOS Blackberry 10
BeOS
Android
Blackberry
Tablet OS
AIX
Cell OS
Aros
IRIX
RTEMS
Mbed Micrium
macOS
Mac OS 9
Linux Lua RTOS
eCOS
FreeRTOS
FreeDOS
FreeBSD
Fuchsia
DragonFly
BSD
ROS
Cisco IOS
OpenBSD OS/2
IBM I
Ultrix
ipadOS
NuttX
Solaris
Xbox
System
Chrome OS
MINIX
Garmin OS
QNX
PlayStation
Portable
Plan 9
OS21
OpenStep Orbis OS
z/TPF z/VM z/VSE Operating systems known to
have run curl
Atari FreeMiNT
DR DOS
Sortix
Zephyr
watchOS
Xenix
DG/UX
ArcaOS
Wii U
SkyOS
Wear OS
Meego
Maemo Moblin
CheriBSD
visionOS
Nintendo
3DS
PikeOS
KasperskyOS
28 CPU architectures
Nios
ARM
ARC
Alpha
Itanium
m88k
m68k
OpenRISC
RISC-V
PowerPC
POWER
AVR32
MicroBlaze
s390 SPARC
x86
VAX
Tilera
SH4
MIPS
CPU architectures known to have run curl
HP-PA
ETRAX LoongArch
CompactRISC
Elbrus
Xtensa z/arch
C-SKY
2 planets
Planets known to have run curl
curl runs in all your devices
>20,000,000,00
0
installations
180,000 lines C89
(1.14 x War And Peace)
Hosting
Downloads
★curl.se
★private origin
★CDN by Fastly
★anycast DNS
★static HTML
★99.95% “origin offload”
code
★GitHub
★2fa required
★17 mainteners
Source
Review
Strict code style
Certain functions are banned
REUSE compliant
Documentation
Multiple audits
External audits
2016: Cure 53 ⇒ 7 CVEs
2022: Trail of Bits ⇒ 2 CVEs
2024: Trail of Bits ⇒ 0 CVEs
Expensive
Tests
unit tests, library tests, tool tests
code style, indenting etc
codespell
torture tests
static/dynamic analyzers
fuzzing
documentation
spelling, bad words, prose
mandatory contents and order
compile (mandatory) examples
verify links and references
Torture testing
Build with a debug option
Use wrapper functions for fallible
functions
Wrappers can optionally return error
Test case is first run once
Count fallible function invokes = N
Rerun the test case N times
For each iteration, make next
function fail
Verify no crash and no memory leak
Repeat for all tests
CI
(fire and forget virtual machines, no persistent output)
Thousands of tests per job
Builds and tests on tens of platforms
Verifies many build combinations
Using many different third party libs
CI-fuzz
CI stats
>200 jobs per commit and PR
Combined over 400,000 tests
Uses multiple CI services
~30 minutes to complete 200 jobs
10 CPU days per day
Repository
No binary blobs
Signed commits
Signed tags
Signed releases
Reproducible tarball builds
Release tarballs built locally
Reproduce a tarball
curl -LO https://curl.se/download/curl-8.11.1.tar.xz
tar xf curl-8.11.1.tar.xz
grep SOURCE_DATE_EPOCH docs/RELEASE-TOOLS.md.dist
git clone https://github.com/curl/curl.git
cd curl
git checkout curl-8_11_1
./scripts/dmaketgz 8.11.1 $SOURCE_DATE_EPOCH
curl -LO https://curl.se/download/curl-8.11.1.tar.xz
./scripts/verify-release curl-8.11.1.tar.xz
Vulnerabilities
Fix vulnerabilities ASAP
alert distros@openwall
Document vulnerabilities thoroughly
CNA to own the CVE situation
Bug-bounty
Vulnerability documentation
Document every CVE in detail, including affected version range
Provide CVE meta-data as JSON
Document exactly which CVEs each curl version is affected by
Provide version-affected-by as JSON
We do not provide CVSS
Vulnerability documentation
Bug bounty
Since April 2019
85,000 USD (via IBB)
76 out of 500 reports resulted in a CVE (15%)
An additional 19% resulted in a bugfix
Always disclosed for full transparency
AI slop is growing
AVG Antivirus Crack With Free version Download 2025 [Latest]
We strive to perform best-in-class in every
aspect regarding security and Open Source
AVG Antivirus Crack With Free version Download 2025 [Latest]
License
This presentation and its contents are
licensed under the Creative Commons
Attribution 4.0 license:
http://creativecommons.org/licenses/by/4.0/

More Related Content

Recently uploaded (20)

Wondershare Filmora Crack Free Download by zqeevcqb3t, has 29 slides with 119 views.
Wondershare Filmora  Crack Free DownloadWondershare Filmora  Crack Free Download
Wondershare Filmora Crack Free Download
zqeevcqb3t
29 slides119 views
Unlock Free AI Technology for Seamless Mosaic Removal.pptx by Undress Baby, has 12 slides with 60 views.
Unlock Free AI Technology for Seamless Mosaic Removal.pptxUnlock Free AI Technology for Seamless Mosaic Removal.pptx
Unlock Free AI Technology for Seamless Mosaic Removal.pptx
Undress Baby
12 slides60 views
SketchUp Pro Crack [2025]-Free Download? by kiran10101khan, has 29 slides with 437 views.
SketchUp Pro Crack [2025]-Free Download?SketchUp Pro Crack [2025]-Free Download?
SketchUp Pro Crack [2025]-Free Download?
kiran10101khan
29 slides437 views
ESET Internet Security Crack 14.0.22.0 + License Key ... by fghh32499, has 2 slides with 21 views.
ESET Internet Security Crack 14.0.22.0 + License Key ...ESET Internet Security Crack 14.0.22.0 + License Key ...
ESET Internet Security Crack 14.0.22.0 + License Key ...
fghh32499
2 slides21 views
500 Pitch Deck Presentation called Data360.pptx by NigelMakunraa, has 13 slides with 10 views.
500 Pitch Deck Presentation called Data360.pptx500 Pitch Deck Presentation called Data360.pptx
500 Pitch Deck Presentation called Data360.pptx
NigelMakunraa
13 slides10 views
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions by Absolute ERP, has 2 slides with 23 views.
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP SolutionsWhy Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions
Absolute ERP
2 slides23 views
iTop VPN Latest Version 2025 Crack Free Download by lr74xqnvuf, has 29 slides with 59 views.
iTop VPN Latest Version 2025 Crack Free DownloadiTop VPN Latest Version 2025 Crack Free Download
iTop VPN Latest Version 2025 Crack Free Download
lr74xqnvuf
29 slides59 views
Compliance-as-a-Service-Securing-Your-Cloud-Infrastructure.pptx by shivaprakash95460, has 8 slides with 7 views.
Compliance-as-a-Service-Securing-Your-Cloud-Infrastructure.pptxCompliance-as-a-Service-Securing-Your-Cloud-Infrastructure.pptx
Compliance-as-a-Service-Securing-Your-Cloud-Infrastructure.pptx
shivaprakash95460
8 slides7 views
AI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune by Alluxio, Inc., has 17 slides with 54 views.
AI/ML Infra Meetup | How Uber Optimizes LLM Training and FinetuneAI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune
AI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune
Alluxio, Inc.
17 slides54 views
Tenorshare 4uKey Crack Fre e Download by oyv9tzurtx, has 29 slides with 192 views.
Tenorshare  4uKey  Crack  Fre e DownloadTenorshare  4uKey  Crack  Fre e Download
Tenorshare 4uKey Crack Fre e Download
oyv9tzurtx
29 slides192 views
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ... by Shubham Joshi, has 14 slides with 18 views.
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...
Shubham Joshi
14 slides18 views
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ... by OnePlan Solutions, has 43 slides with 26 views.
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...
OnePlan Solutions
43 slides26 views
Enscape Latest 2025 Crack Free Download by rnzu5cxw0y, has 29 slides with 50 views.
Enscape Latest 2025  Crack Free DownloadEnscape Latest 2025  Crack Free Download
Enscape Latest 2025 Crack Free Download
rnzu5cxw0y
29 slides50 views
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf by Juarez Junior, has 29 slides with 11 views.
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdfDevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf
Juarez Junior
29 slides11 views
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf by Juarez Junior, has 50 slides with 10 views.
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdfDUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf
Juarez Junior
50 slides10 views
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat... by Alluxio, Inc., has 16 slides with 77 views.
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...
Alluxio, Inc.
16 slides77 views
odoo website helpdesk Ticket management app by Aagam infotech , has 32 slides with 11 views.
odoo website helpdesk Ticket management appodoo website helpdesk Ticket management app
odoo website helpdesk Ticket management app
Aagam infotech
32 slides11 views
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale by Alluxio, Inc., has 16 slides with 95 views.
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber ScaleAI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale
Alluxio, Inc.
16 slides95 views
Account Cash Flow Statement Report Generate in odoo by AxisTechnolabs, has 16 slides with 34 views.
Account Cash Flow Statement Report Generate in odooAccount Cash Flow Statement Report Generate in odoo
Account Cash Flow Statement Report Generate in odoo
AxisTechnolabs
16 slides34 views
Code or No-Code Tests: Why Top Teams Choose Both by Applitools, has 13 slides with 19 views.
Code or No-Code Tests: Why Top Teams Choose BothCode or No-Code Tests: Why Top Teams Choose Both
Code or No-Code Tests: Why Top Teams Choose Both
Applitools
13 slides19 views
Unlock Free AI Technology for Seamless Mosaic Removal.pptx by Undress Baby, has 12 slides with 60 views.
Unlock Free AI Technology for Seamless Mosaic Removal.pptxUnlock Free AI Technology for Seamless Mosaic Removal.pptx
Unlock Free AI Technology for Seamless Mosaic Removal.pptx
Undress Baby
12 slides60 views
ESET Internet Security Crack 14.0.22.0 + License Key ... by fghh32499, has 2 slides with 21 views.
ESET Internet Security Crack 14.0.22.0 + License Key ...ESET Internet Security Crack 14.0.22.0 + License Key ...
ESET Internet Security Crack 14.0.22.0 + License Key ...
fghh32499
2 slides21 views
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions by Absolute ERP, has 2 slides with 23 views.
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP SolutionsWhy Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions
Why Every Cables and Wires Manufacturer Needs a Cloud-Based ERP Solutions
Absolute ERP
2 slides23 views
iTop VPN Latest Version 2025 Crack Free Download by lr74xqnvuf, has 29 slides with 59 views.
iTop VPN Latest Version 2025 Crack Free DownloadiTop VPN Latest Version 2025 Crack Free Download
iTop VPN Latest Version 2025 Crack Free Download
lr74xqnvuf
29 slides59 views
AI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune by Alluxio, Inc., has 17 slides with 54 views.
AI/ML Infra Meetup | How Uber Optimizes LLM Training and FinetuneAI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune
AI/ML Infra Meetup | How Uber Optimizes LLM Training and Finetune
Alluxio, Inc.
17 slides54 views
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ... by Shubham Joshi, has 14 slides with 18 views.
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...
Bug Life Cycle in Software Testing: Understanding the Journey from Detection ...
Shubham Joshi
14 slides18 views
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ... by OnePlan Solutions, has 43 slides with 26 views.
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...
Fixing Project Portfolio Visibilit: How to Get Real-Time Insights for Better ...
OnePlan Solutions
43 slides26 views
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf by Juarez Junior, has 29 slides with 11 views.
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdfDevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf
DevTalks Cluj Romania - A Solid Foundation for GenAI Apps.pdf
Juarez Junior
29 slides11 views
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf by Juarez Junior, has 50 slides with 10 views.
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdfDUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf
DUBJUG_Blazingly Fast GenAI App Development With Java and Spring AI.pdf
Juarez Junior
50 slides10 views
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat... by Alluxio, Inc., has 16 slides with 77 views.
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...
AI/ML Infra Meetup | Building Production Platform for Large-Scale Recommendat...
Alluxio, Inc.
16 slides77 views
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale by Alluxio, Inc., has 16 slides with 95 views.
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber ScaleAI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale
AI/ML Infra Meetup | Deployment, Discovery and Serving of LLMs at Uber Scale
Alluxio, Inc.
16 slides95 views
Code or No-Code Tests: Why Top Teams Choose Both by Applitools, has 13 slides with 19 views.
Code or No-Code Tests: Why Top Teams Choose BothCode or No-Code Tests: Why Top Teams Choose Both
Code or No-Code Tests: Why Top Teams Choose Both
Applitools
13 slides19 views

Featured (20)

2024 State of Marketing Report – by Hubspot by Marius Sescu, has 43 slides with 116409 views.
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
Marius Sescu
43 slides116.4K views
Everything You Need To Know About ChatGPT by Expeed Software, has 19 slides with 153358 views.
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
Expeed Software
19 slides153.4K views
Product Design Trends in 2024 | Teenage Engineerings by Pixeldarts, has 8 slides with 50004 views.
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
8 slides50K views
How Race, Age and Gender Shape Attitudes Towards Mental Health by ThinkNow, has 21 slides with 35599 views.
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
21 slides35.6K views
AI Trends in Creative Operations 2024 by Artwork Flow.pdf by marketingartwork, has 29 slides with 66034 views.
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
marketingartwork
29 slides66K views
Skeleton Culture Code by Skeleton Technologies, has 28 slides with 37690 views.
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
Skeleton Technologies
28 slides37.7K views
PEPSICO Presentation to CAGNY Conference Feb 2024 by Neil Kimberley, has 39 slides with 33943 views.
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Neil Kimberley
39 slides33.9K views
Content Methodology: A Best Practices Report (Webinar) by contently, has 50 slides with 17851 views.
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
50 slides17.9K views
How to Prepare For a Successful Job Search for 2024 by Albert Qian, has 37 slides with 40173 views.
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Albert Qian
37 slides40.2K views
Social Media Marketing Trends 2024 // The Global Indie Insights by Kurio // The Social Media Age(ncy), has 96 slides with 42343 views.
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
96 slides42.3K views
Trends In Paid Search: Navigating The Digital Landscape In 2024 by Search Engine Journal, has 31 slides with 19666 views.
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
Search Engine Journal
31 slides19.7K views
5 Public speaking tips from TED - Visualized summary by SpeakerHub, has 16 slides with 18277 views.
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
SpeakerHub
16 slides18.3K views
ChatGPT and the Future of Work - Clark Boyd by Clark Boyd, has 69 slides with 66749 views.
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Clark Boyd
69 slides66.7K views
Getting into the tech field. what next by Tessa Mero, has 22 slides with 20443 views.
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
Tessa Mero
22 slides20.4K views
Google's Just Not That Into You: Understanding Core Updates & Search Intent by Lily Ray, has 99 slides with 18353 views.
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Lily Ray
99 slides18.4K views
How to have difficult conversations by Rajiv Jayarajah, MAppComm, ACC, has 19 slides with 17381 views.
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
Rajiv Jayarajah, MAppComm, ACC
19 slides17.4K views
Introduction to Data Science by Christy Abraham Joy, has 51 slides with 91802 views.
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
Christy Abraham Joy
51 slides91.8K views
Time Management & Productivity - Best Practices by Vit Horky, has 42 slides with 176484 views.
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
Vit Horky
42 slides176.5K views
The six step guide to practical project management by MindGenius, has 27 slides with 41377 views.
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
MindGenius
27 slides41.4K views
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright... by RachelPearson36, has 21 slides with 18766 views.
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
RachelPearson36
21 slides18.8K views
Product Design Trends in 2024 | Teenage Engineerings by Pixeldarts, has 8 slides with 50004 views.
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
8 slides50K views
How Race, Age and Gender Shape Attitudes Towards Mental Health by ThinkNow, has 21 slides with 35599 views.
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
21 slides35.6K views
Content Methodology: A Best Practices Report (Webinar) by contently, has 50 slides with 17851 views.
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
50 slides17.9K views
How to Prepare For a Successful Job Search for 2024 by Albert Qian, has 37 slides with 40173 views.
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Albert Qian
37 slides40.2K views
5 Public speaking tips from TED - Visualized summary by SpeakerHub, has 16 slides with 18277 views.
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
SpeakerHub
16 slides18.3K views
ChatGPT and the Future of Work - Clark Boyd by Clark Boyd, has 69 slides with 66749 views.
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Clark Boyd
69 slides66.7K views
Google's Just Not That Into You: Understanding Core Updates & Search Intent by Lily Ray, has 99 slides with 18353 views.
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Lily Ray
99 slides18.4K views
Time Management & Productivity - Best Practices by Vit Horky, has 42 slides with 176484 views.
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
Vit Horky
42 slides176.5K views
The six step guide to practical project management by MindGenius, has 27 slides with 41377 views.
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
MindGenius
27 slides41.4K views
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright... by RachelPearson36, has 21 slides with 18766 views.
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
RachelPearson36
21 slides18.8K views

AVG Antivirus Crack With Free version Download 2025 [Latest]

  • 1. Daniel Stenberg Feb 1, 2025 Tightening every bolt
  • 2. Daniel Stenberg @bagder @mastodon.social https: daniel.haxx.se
  • 3. @bagder Just ask!
  • 4. An open source project that makes a command line tool and a library for transferring data using Internet protocols curl.se
  • 5. We strive to perform best-in-class in every aspect regarding security and Open Source
  • 7. NextStep Minoca 106 operating systems Syllable OS TPF Tizen Symbian Tru64 SunOS tvOS ucLinux Genode Hurd iOS Integrity Illumos HP-UX HardenedBSD Haiku z/OS Nintendo Switch NonStop OS NetWare MorphOS MPE/iX MS-DOS NCR MP-RAS NetBSD RISC OS Redox ReactOS Sailfish OS SCO Unix Serenity SINIX-Z Qubes OS UnixWare WebOS vxWorks VMS Windows UNICOS Windows CE Wii System Software AmigaOS Blackberry 10 BeOS Android Blackberry Tablet OS AIX Cell OS Aros IRIX RTEMS Mbed Micrium macOS Mac OS 9 Linux Lua RTOS eCOS FreeRTOS FreeDOS FreeBSD Fuchsia DragonFly BSD ROS Cisco IOS OpenBSD OS/2 IBM I Ultrix ipadOS NuttX Solaris Xbox System Chrome OS MINIX Garmin OS QNX PlayStation Portable Plan 9 OS21 OpenStep Orbis OS z/TPF z/VM z/VSE Operating systems known to have run curl Atari FreeMiNT DR DOS Sortix Zephyr watchOS Xenix DG/UX ArcaOS Wii U SkyOS Wear OS Meego Maemo Moblin CheriBSD visionOS Nintendo 3DS PikeOS KasperskyOS
  • 8. 28 CPU architectures Nios ARM ARC Alpha Itanium m88k m68k OpenRISC RISC-V PowerPC POWER AVR32 MicroBlaze s390 SPARC x86 VAX Tilera SH4 MIPS CPU architectures known to have run curl HP-PA ETRAX LoongArch CompactRISC Elbrus Xtensa z/arch C-SKY
  • 9. 2 planets Planets known to have run curl
  • 10. curl runs in all your devices
  • 11. >20,000,000,00 0 installations
  • 12. 180,000 lines C89 (1.14 x War And Peace)
  • 13. Hosting Downloads ★curl.se ★private origin ★CDN by Fastly ★anycast DNS ★static HTML ★99.95% “origin offload” code ★GitHub ★2fa required ★17 mainteners
  • 14. Source Review Strict code style Certain functions are banned REUSE compliant Documentation Multiple audits
  • 15. External audits 2016: Cure 53 ⇒ 7 CVEs 2022: Trail of Bits ⇒ 2 CVEs 2024: Trail of Bits ⇒ 0 CVEs Expensive
  • 16. Tests unit tests, library tests, tool tests code style, indenting etc codespell torture tests static/dynamic analyzers fuzzing documentation spelling, bad words, prose mandatory contents and order compile (mandatory) examples verify links and references
  • 17. Torture testing Build with a debug option Use wrapper functions for fallible functions Wrappers can optionally return error Test case is first run once Count fallible function invokes = N Rerun the test case N times For each iteration, make next function fail Verify no crash and no memory leak Repeat for all tests
  • 18. CI (fire and forget virtual machines, no persistent output) Thousands of tests per job Builds and tests on tens of platforms Verifies many build combinations Using many different third party libs CI-fuzz
  • 19. CI stats >200 jobs per commit and PR Combined over 400,000 tests Uses multiple CI services ~30 minutes to complete 200 jobs 10 CPU days per day
  • 20. Repository No binary blobs Signed commits Signed tags Signed releases Reproducible tarball builds Release tarballs built locally
  • 21. Reproduce a tarball curl -LO https://curl.se/download/curl-8.11.1.tar.xz tar xf curl-8.11.1.tar.xz grep SOURCE_DATE_EPOCH docs/RELEASE-TOOLS.md.dist git clone https://github.com/curl/curl.git cd curl git checkout curl-8_11_1 ./scripts/dmaketgz 8.11.1 $SOURCE_DATE_EPOCH curl -LO https://curl.se/download/curl-8.11.1.tar.xz ./scripts/verify-release curl-8.11.1.tar.xz
  • 22. Vulnerabilities Fix vulnerabilities ASAP alert distros@openwall Document vulnerabilities thoroughly CNA to own the CVE situation Bug-bounty
  • 23. Vulnerability documentation Document every CVE in detail, including affected version range Provide CVE meta-data as JSON Document exactly which CVEs each curl version is affected by Provide version-affected-by as JSON We do not provide CVSS
  • 24. Vulnerability documentation
  • 25. Bug bounty Since April 2019 85,000 USD (via IBB) 76 out of 500 reports resulted in a CVE (15%) An additional 19% resulted in a bugfix Always disclosed for full transparency AI slop is growing
  • 27. We strive to perform best-in-class in every aspect regarding security and Open Source
  • 29. License This presentation and its contents are licensed under the Creative Commons Attribution 4.0 license: http://creativecommons.org/licenses/by/4.0/