2026-10-29T20:23:26Z https://nostr.now Stefan Eissing https://nostr.now/npub1uncykwynxpfvy27vnzns7xg74fnqu2ma7mg5hrxj75dmyzph6p0s28cvec https://assets.chaos.social/accounts/avatars/000/004/084/original/f83f94f79970fb3d.png https://assets.chaos.social/accounts/avatars/000/004/084/original/f83f94f79970fb3d.png https://nostr.now/nevent1qqsxvq8q5ycfx97lh3vt78rpp6dnd2lthmwmh69ht9ua56tlcxulz4czyrj0qjecjvc99s3tejv2wrcer64xvr3t0hmdzjuv6t63hvsgxlg97lkpv3m The simple observation:<br/><br/>The #curl project is getting DoS‘ed by security researchers.<br/><br/>No mal intent, but driven by stock/work market evaluations.<br/><br/>Example: Aisle has shown its value by the curl CVEs claimed and was now bought by Cohere, presumably a good deal for both companies.<br/><br/>Economically reasonable behaviour for both. The FOSS projects are the roadkill, though.<br/><br/>All reporters have similar motivations, down to individuals improving their personal market value. 2026-10-18T07:39:39Z https://nostr.now/nevent1qqspqm4l84mu7y5mt77077ntckjdc2wmknfvsxrfw4evmusle28k75czyrj0qjecjvc99s3tejv2wrcer64xvr3t0hmdzjuv6t63hvsgxlg97js5fcm If I get the suspicion that someone is slopping a #curl PR, I ask questions.<br/><br/>If they answer as human and explain their thoughts, this is fine. They used the LLM as a tool, but they are in charge of it. We review, they improve until it‘s accepted.<br/><br/>If their answer is likely from an LLM itself, we are dealing with a meatproxy („Apologies…“ etc). The chances of this PR landing become practically zero. <br/><br/>But I look at the idea behind the PR: was there one? Is it maybe worth doing in another way? 2026-08-30T06:49:19Z