Daniel Stenberg
Swedish open source developer; creator and lead maintainer of curl and libcurl, and a co-founder of the Rockbox project.
Daniel Stenberg did not write this page. ppll compiled it from their own words, each linked to the source. Is this you? · Report a mistake
Latest Mastodon
What they believe
-
Shared cloud infrastructure makes it hard to get stable, reproducible performance-testing conditions.
This is basically impossibly to accomplish using most cloud infrastructure since those are almost always shared with countless other users.
daniel.haxx.seSaid 14 Aug 2026This on korrents
-
Open source work is largely voluntary, so its maintainers need periodic breaks too.
it helps sending a signal and a reminder that Open Source is to a large extent done voluntarily and even maintainers need a break at times.
daniel.haxx.seSaid 3 Aug 2026This on korrents
The bold line is korrents’ wording; the quote is theirs. These 2: what they wrote before what they said aloud, one per source, newest first.
Feed
As its own page →Hiding
21 October
20 October
- Mastodon
- GitHubca-bundle — The Mozilla CA bundle extracted and converted to PEM. This repository functions as a backup to the automated service on the curl web site.
- Mastodon
+ 9 more
- Mastodon
- Mastodon
- Mastodon
- Mastodon
- Mastodon
- Mastodon
- Mastodon
- BlogDo minor curl vulnerabilities in the open
- Mastodon
19 October
16 October
15 October
14 October
13 October
12 October
7 October
25 September
2 September
30 August
14 August
From one piece curl performance 2 beliefs · daniel.haxx.se
-
Their words
Performance tests are highly specific and dependent on the exact machine it runs on, the exact third party libraries and their versions that are used, the other components involved in the tests, such as the servers, and more.
-
korrents.com
Shared cloud infrastructure makes it hard to get stable, reproducible performance-testing conditions.Their words
This is basically impossibly to accomplish using most cloud infrastructure since those are almost always shared with countless other users.
7 August
3 August
-
Their words
it helps sending a signal and a reminder that Open Source is to a large extent done voluntarily and even maintainers need a break at times.
16 July
From one piece Workshop Basel day three 2 beliefs · daniel.haxx.se
-
korrents.com
Today's live-streamed TV broadcasts have higher latency than the 1969 moon landing broadcast.Their words
The moon landing was broadcasted with less latency than current live-streamed TV
-
Their words
The feature is disabled by Google in ChromeOS, Android and in production Google servers which certainly holds back some use of it.
23 March
Nothing matches.
Beliefs
Korrents What they believe 5 beliefs — each backed by an exact quote.
Each is a — compiled by korrents.com, not by them: the one-line wordings are korrents', the quotes are theirs.
Recent
Shared cloud infrastructure makes it hard to get stable, reproducible performance-testing conditions.
This is basically impossibly to accomplish using most cloud infrastructure since those are almost always shared with countless other users.
curl performance Said 14 Aug 2026
Performance test results are highly dependent on the specific machine, library versions, and other components used, making them hard to compare over time.
Performance tests are highly specific and dependent on the exact machine it runs on, the exact third party libraries and their versions that are used, the other components involved in the tests, such as the servers, and more.
curl performance Said 14 Aug 2026
Open source work is largely voluntary, so its maintainers need periodic breaks too.
it helps sending a signal and a reminder that Open Source is to a large extent done voluntarily and even maintainers need a break at times.
What the bliss taught us Said 3 Aug 2026
Show 2 more
Google declining to use io_uring in its own products (ChromeOS, Android, production servers) holds back the technology's broader adoption.
The feature is disabled by Google in ChromeOS, Android and in production Google servers which certainly holds back some use of it.
Workshop Basel day three Said 16 Jul 2026
Today's live-streamed TV broadcasts have higher latency than the 1969 moon landing broadcast.
The moon landing was broadcasted with less latency than current live-streamed TV
Workshop Basel day three Said 16 Jul 2026
What is a korrent?
A korrent is a belief a person has stated in their own words: one sentence stating the claim, backed by a quote and a source, kept at korrents.com.
Under a name here, the quoted block is what they actually said. The korrent beneath it is the claim those words support, in korrents' wording — tap it to see the record, its source, and who else holds it.
Nobody here wrote their own korrents. They are compiled from public statements, and a person can change their mind, which is recorded too.
Recommends rcmnd
rcmnd What they recommend 6 things — each backed by an exact quote.
Compiled by rcmnd.app, not by them: the quotes are theirs, and each links to the post it was copied from.
Recent
Uses HTC Desire HD
I'm using my Android phone for that purpose now - still using an HTC Desire HD that hangs in decently and haven't yet made me upgrade the phone even after over 18 months.
usesthis.com 4 Sept 2012
Uses ASUS EEE PC S101
I have an ASUS EEE PC S101 (10.1" screen with SSD disk) that I use to bring with me when I travel light and I use it as presentation computer when I do talks at conferences and similar arrangements.
usesthis.com 4 Sept 2012
Uses Synology DS211j
Also located there is the Dlink wifi router, the HP ink printer and my Synology DS211j NAS.
usesthis.com 4 Sept 2012
Show 3 more
Mixed on KDE
I've therefore abandoned gnome for KDE, which isn't a perfect fit for me either but still way better than gnome3.
usesthis.com 4 Sept 2012
Uses emacs
Apart from the OS, I'm a C coder and an Emacs user, and what more do you need?
usesthis.com 4 Sept 2012
Liked Debian
I'm a Linux guy. I run Linux on as many machines as possible and out of all distros I really prefer Debian.
usesthis.com 4 Sept 2012
Where they publish
Site daniel.haxx.se Personal site: about, talks, contact.
Recent
- Do minor curl vulnerabilities in the open 20 Oct 2026 The curl project has decided to alter its vulnerability disclosure program procedure and starting October 26 2026, we insist that all vulnerability reports submitted to us that are deemed to be severity LOW or MEDIUM sh…
- OSI approved the curl license 15 Oct 2026 curl started out GPL licensed, as direct inheritance from its httpget days, but in October 1998 we switched to the Mozilla Public License (MPL). In 2001, we added the MIT license as an additional license to optionally u…
- A curl audit by Aisle 14 Oct 2026 Over the last year or so, multiple engineers at Aisle have spent a lot of time and energy while pointing their AI powered tooling at the curl source code. This has resulted in no less than thirty-five published curl vul…
Show 7 more
- A UAF turned RCE 14 Oct 2026 In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post ex…
- curl 8.23.0 14 Oct 2026 Release presentation Numbers the 277th release4 changes42 days (total: 10,929)281 bugfixes (total: 14,770)476 commits (total: 40,084)0 new public libcurl function (total: 100)0 new curl_easy_setopt() option (total: 312)…
- A slightly faster slimmer curl 13 Oct 2026 Back in August I mentioned the new curl performance tests we have running. I figured it could be apt to return to this topic just to mention some of the initial outcomes. When the team gets a new set of charts, graphs a…
- The 2026 curl team 12 Oct 2026 The curl security team happens to also double as the curl core team. The small group of people who assess security reports and take project decisions. The exact set of participants in this team of course vary over time,…
- Twenty-two pending curl vulnerabilities 7 Oct 2026 On October 14 2026 we will ship curl 8.23.0. The next iteration in the never-ending series of version bumps from the curl project. We always think of the next release as the best version we ever did – and this time is n…
- 25 years on Apple computers 25 Sept 2026 Exactly on this day, September 25 2001, Apple shipped version 10.1 of their OS X operating system. The one they later would rename to macOS. Exactly twenty-five years ago today. Within all their fancy release presentati…
- curl 8.22.0 2 Sept 2026 Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presen…
Link verified 5 Sept 2026. Recent items update automatically from the channel.
Blog daniel.haxx.se/blog Long-running blog about curl, HTTP and open source.
Recent
- Do minor curl vulnerabilities in the open 20 Oct 2026 The curl project has decided to alter its vulnerability disclosure program procedure and starting October 26 2026, we insist that all vulnerability reports submitted to us that are deemed to be severity LOW or MEDIUM sh…
- OSI approved the curl license 15 Oct 2026 curl started out GPL licensed, as direct inheritance from its httpget days, but in October 1998 we switched to the Mozilla Public License (MPL). In 2001, we added the MIT license as an additional license to optionally u…
- A curl audit by Aisle 14 Oct 2026 Over the last year or so, multiple engineers at Aisle have spent a lot of time and energy while pointing their AI powered tooling at the curl source code. This has resulted in no less than thirty-five published curl vul…
Show 7 more
- A UAF turned RCE 14 Oct 2026 In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post ex…
- curl 8.23.0 14 Oct 2026 Release presentation Numbers the 277th release4 changes42 days (total: 10,929)281 bugfixes (total: 14,770)476 commits (total: 40,084)0 new public libcurl function (total: 100)0 new curl_easy_setopt() option (total: 312)…
- A slightly faster slimmer curl 13 Oct 2026 Back in August I mentioned the new curl performance tests we have running. I figured it could be apt to return to this topic just to mention some of the initial outcomes. When the team gets a new set of charts, graphs a…
- The 2026 curl team 12 Oct 2026 The curl security team happens to also double as the curl core team. The small group of people who assess security reports and take project decisions. The exact set of participants in this team of course vary over time,…
- Twenty-two pending curl vulnerabilities 7 Oct 2026 On October 14 2026 we will ship curl 8.23.0. The next iteration in the never-ending series of version bumps from the curl project. We always think of the next release as the best version we ever did – and this time is n…
- 25 years on Apple computers 25 Sept 2026 Exactly on this day, September 25 2001, Apple shipped version 10.1 of their OS X operating system. The one they later would rename to macOS. Exactly twenty-five years ago today. Within all their fancy release presentati…
- curl 8.22.0 2 Sept 2026 Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presen…
Link verified 5 Sept 2026. Recent items update automatically from the channel.
Mastodon @bagder@mastodon.social Where he posts day to day.
Recent
- I'm in Borås today. I'll blab after lunch. Brought stickers. 21 Oct 2026
- With the new annoying fixed sidebar on Mastodon, what's the going trick for Firefox to hide it? Surely no one wants it there all the time? 21 Oct 2026
- Out of all #curl CVEs we have registered since 2019, 41% have been registered in 2026 20 Oct 2026
Show 17 more
- you know its a special day when the curl signal group is busier than the mastodon feed 20 Oct 2026
- The CA cert bundle on curl.se is updated accordingly after the latest alarms. If you use one of these: update. 20 Oct 2026 curl.se
- RE: https://infosec.exchange/@harrysintonen/117473095311666143 Someone just a little mean spirited would perhaps think that Mozilla doesn't really care since Firefox itself is not harmed by this since they have other means. It's only the rest of the internet world who might burn... 20 Oct 2026
- We started the #curl hackerone program in April 2019. We have received 1,030 vulnerability reports over these 7.5 years. More than a third of the reports were submitted in 2026. 20 Oct 2026
- Original AI word salad describing a flaw: 241 words and 1322 characters. My human summary of the same problem: 27 words,. 142 characters. 20 Oct 2026
- "Ignoring the slop" cannot be done and it doesn't help. These reports created with the help of AIs point out actual problems, and sometimes vulnerabilities. Ignoring real vulnerabilities because they were found by AI does not make users safe and secure. It makes them vulnerable. We don't want that. (I don't call this "slop" because it's typically accurate and correct, even if too wordy) 20 Oct 2026
- We're slowly realizing this is the new reality. This is the background noise we must live with, so we need to adapt our processes to this. A 5 submissions a day life. 20 Oct 2026
- Do minor #curl vulnerabilities in the open (Starting Monday October 26) 20 Oct 2026 daniel.haxx.se
- #curl hackerone stats as of yday 20 Oct 2026
- At our #curl maintainer meeting tonight we decided to move forward with the "handle LOW/MED vuln reports openly on GitHub". Now we just need to get the documentation and processes adjusted, then push the button to do this. Maybe write a blog post too. So, ideally within this week. Stay tuned 19 Oct 2026
- And all I do now is cleaning toilets 19 Oct 2026
- working with vulnerability reports really is the toilet cleaning of open source 19 Oct 2026
- At 32 #curl vulnerability submissions since Saturday morning. All of them are MUCH too long without explaining the problem up front in a few human written sentences. Most of them identify a problem. Many of them overstate the problem. Many of them claim a vulnerability when its just a minor bug. 19 Oct 2026
- Four years ago, the #curl project was part of the Sovereign Tech Fund's pilot program and we improved #curl a bit: 19 Oct 2026 daniel.haxx.se
- Welcome Jeremy Levartovsky as #curl commit author 1553: 19 Oct 2026 github.com
- Welcome Martin Mirchev as #curl commit author 1552: 19 Oct 2026 github.com
- @divVerent having guidelines of how to set severity is always good and important, whether we do this step or not. And we try. 19 Oct 2026
Link verified 5 Sept 2026. Recent items update automatically from the channel.
GitHub @bagder curl and libcurl development.
Recent
- ca-bundle — The Mozilla CA bundle extracted and converted to PEM. This repository functions as a backup to the automated service on the curl web site. 20 Oct 2026
- daniel.haxx.se — This is the contents of the daniel.haxx.se website 16 Oct 2026
- emails — emails I received 30 Aug 2026
Show 14 more
- c-comments — A tool that shows all comments and strings from C source 7 Aug 2026
- bagder 23 Mar 2026
- FOSDEM — Advice for FOSDEM attendees 5 Feb 2026
- docs — Internet protocols and tools related documentation 4 Jan 2026
- fcpp — Frexx C preprocessor 3 Nov 2025
- roffit — converts nroff man pages to HTML 16 Oct 2025
- dancer-416 — Dancer 4.16 - snapshot of the last Dancer release we made on March 18 2001 2 Sept 2025
- irchistory — The history of IRC 2 Sept 2025
- uncurled — Uncurled - everything I know and learned about running and maintaining Open Source projects for three decades. 2 Sept 2025
- repladdrinfo — A getaddrinfo drop-in replacement powered by c-ares 22 Apr 2025
- c-ares-for-qnx — build scripts for c-ares on QNX 19 Dec 2024
- http3-explained — A document describing the HTTP/3 and QUIC protocols 7 Aug 2024
- HTTP3-test — Documentation for early HTTP/3 testing (with curl and more) 5 Jul 2024
- github-feedback — Ideas and features I'd like to see GitHub implement 25 May 2024
Link verified 5 Sept 2026. Recent items update automatically from the channel.
About the English under a post
Some people here publish in a language other than English. Where they do, this site shows a machine translation beneath the post, in this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the serif above is exactly what the person published, and it is what to quote them on. A translation can be wrong in ways that matter, especially about tone.
Only the post's own words are translated. A quoted post, a linked article and a belief on korrents.com are left in their original language.