curl

As a workaround, you can patch them manually (example from Curl's CI) github.com/curl/curl/blob/f0da5390ad9d380807cc83e…

Welcome Stefan Reinauer as #curl commit author 1571: curl#23695

Declined a 25 LPA PPO with a 2 year bond for a 5.75 LPA service company. One year later I am on a PIP. Was I wrong? TL;DR: In final year I picked the safe offer over a high paying bonded one. The safe offer turned into a bench year, a PIP and 20+ postponed HR meetings. Meanwhile the stuff I built on my own is the only thing keeping my profile alive. Genuinely want your takes, especially if you are choosing right now. If you were around this sub 5 months ago, you might remember my post about how my dad's phone storage issue accidentally turned into my first real open source project: reddit.com This post is the other side of that story. The project did well. The job did not. The decision (final year, 2025): I interned at a crypto focused product startup and got a PPO of roughly 25 LPA. It came with a 2 year bond and some contractual terms I was not comfortable signing. I panicked about the lock in and declined it, then took the safe 5.75 LPA offer from a big service based IT company. Felt responsible at the time. Still not sure it was right. What the safe option actually looked like: joined in June 2025. Barely any real project allocation. Got removed from the internal project pool. Now on a PIP. Discussions about my situation have been postponed more than 20 times across 4 months. Nobody will say what happens next. Quick update on the project since some of you asked about it back then: it crossed 138 GitHub stars, I spoke about it in the AOSP devroom at IndiaFOSS 2026, and last week I got PRs merged into Neovim and curl within two days. Daniel Stenberg reshared the curl one. SocketSweep repo: VishnuSrivatsava/SocketSweep IndiaFOSS talk: youtube.com Neovim PR (regexp engine crash fix): neovim#42560 curl fix: github.com/curl/curl/commit/a4eed8c7 Not trying to promote anything, it is just context for the question below. What I would tell final year me: a bond is a price tag on your freedom for two years, price it honestly against the company and not against fear. Bench time is yours to fill, nobody at a services company will fill it for you. And HR delays are the answer. Question: knowing this, would you take the 2 year bond at 25, or the safe 5.75? And if you are benched right now, what has actually worked for you? Edit: cant edit the title so adding this here, the 25 headline was around 8 base plus a good chunk in their own coin, that is how the offer quoted it. The 2 year bond was the real issue.

My first year in IT hasn't gone as expected. Looking for advice on moving forward as a software engineer. I'm a 2025 CSE graduate. I joined a large service-based IT company as a Software Engineer in June 2025, expecting to start working on real engineering projects and grow as a developer. There's a decision from my final year that I keep thinking about. I had received a PPO from a product-focused startup where I'd previously interned, for around ₹25 LPA CTC. I declined it because I wasn't comfortable with the two-year bond and some contractual terms. I eventually joined my current company at ₹5.75 LPA. At the time, I felt it was the right decision, but looking back, I'm honestly not sure. Unfortunately, things haven't gone as expected. I've had very little meaningful project responsibility since joining. I was eventually put on PIP and removed from the internal project pool. For the past four months, discussions about my situation have been postponed more than 20 times, with very little clarity about what happens next. I didn't want to spend all this time just waiting, so I've been trying to improve my skills and work on things independently. A few things I've managed to accomplish: - Built SocketSweep, an Android storage analyser using a parallel C++17 scanner and Rust/Tauri. It's now at 138 GitHub stars and scanned 93,239 files across 51 GB in 7.7 seconds on my S24 Ultra. - Got selected to speak at IndiaFOSS 2026, where I presented SocketSweep in the AOSP devroom. - Contributed fixes to Neovim and curl, both merged upstream within two days of each other. Daniel Stenberg also reshared my LinkedIn post about the curl contribution! - Built a working internal Python/FastAPI AI incident-management POC at my current company using Microsoft Foundry, involving RCA processing, duplicate detection and LLM-generated incident communications. The Neovim and curl contributions getting merged within two days was honestly one of the most exciting moments of my engineering journey. For reference, here are the upstream contributions: Neovim PR #42560 (merged): neovim#42560 curl commit (merged): github.com/curl/curl/commit/a4eed8c7 These experiences have made me realise that I'm particularly interested in systems programming, C/C++, Rust, Linux, Android internals, backend engineering and developer tooling. I'm now trying to figure out the best way forward. I'd appreciate advice from people who've been in similar situations or have experience hiring engineers. A few things I'm wondering: 1. How much value do companies place on meaningful open-source contributions when evaluating candidates? 2. How do I demonstrate engineering ability when I haven't had much professional project ownership? 3. Given my background, should I focus on getting another development role first, or keep targeting roles closer to my technical interests? 4. Looking back, how would you evaluate the decision between a higher-paying PPO with restrictive contractual terms and a lower-paying offer without those terms? I'm actively exploring my next opportunity and would genuinely appreciate some perspective.

The developer of curl — github.com/curl, Daniel Stenberg, talks at FOSSCOMM 2026 — 2026.fosscomm.gr. Amazingly, curl has reached 30 billion installations. Here's a slide of products and services using it.

The developer of curl — github.com/curl, Daniel Stenberg, talks at FOSSCOMM 2026 — 2026.fosscomm.gr. Amazingly, curl has reached 30 billion installations. Here's a slide of products and services using it. t.co

Two upstream merges in two days: Neovim and curl. An update since my IndiaFOSS post! A couple of months ago, I posted here about SocketSweep, the Android storage analyser I built because MTP was painfully slow when analysing my dad's phone. A quick update: I finally delivered the talk at the AOSP devroom at IndiaFOSS 2026! The talk covers why MTP becomes a bottleneck, how I use an ADB-pushed native C++ daemon and a local socket instead, and the C++/Rust architecture behind SocketSweep. Still waiting for the dedicated 4K recording, but the talk is available in the event livestream! The last two days have been absolutely unreal. I got contributions merged into two projects I've been following: - Neovim: Fixed a regexp engine crash on invalid multibyte input. PR #42560 was merged. - curl: Fixed percent-decoding of protocol identifiers in Alt-Svc headers for RFC 7838 compliance. The curl fix went through multiple review iterations. Daniel Stenberg suggested reusing curl's existing URL-decoding helper instead of my initial custom implementation. I reworked it, added validation for decoded control characters and NUL bytes, and expanded regression coverage. The final patch covers 15 regression cases. All 82 unit tests and 59 simulated allocation-failure cases passed locally. And the cherry on top: Daniel Stenberg himself reshared my LinkedIn post about the contribution. Still feels like a dream! A little personal context: I joined Capgemini in June 2025, but have spent close to a year without meaningful project responsibilities. I was eventually put on PIP and removed from the project pool. For the past four months, discussions about my situation have been postponed more than 20 times, with very little clarity about what happens next. I didn't want to keep waiting, so I spent that time building, learning and contributing to projects I genuinely care about. I'm now looking for my next opportunity, particularly in C/C++, Linux, systems engineering, Android, backend infrastructure or developer tooling. For anyone who's moved from a service company into a product or systems engineering role: how did you make that transition? How much did upstream contributions help? Would genuinely appreciate advice and happy to connect with teams working in these areas. Links: IndiaFOSS talk (livestream): youtube.com Neovim PR #42560: neovim#42560 curl commit: github.com/curl/curl/commit/a4eed8c7 SocketSweep repository: VishnuSrivatsava/SocketSweep

@UK_Daniel_Card CURLOPT_ENCODING = 'gzip,deflate' is not a reliable Brotli block. It changes what libcurl requests, but a server can return a different encoding. With automatic decoding enabled, Brotli may still be processed.  github.com/curl/curl/blob/master/docs/libcurl/opt…

Welcome to the new #curl vulnerability disclosure policy: curl.se 13 pending security advisories currently being worked on in the public: github.com/curl/curl-www/pulls

@wuren463338 隔壁 curl 已经应付不过来了，评级为 high 以下的安全漏洞都会公开处理（ curl#23458