Stefan Eissing

Apache httpd project member, HTTP/2, Lets Encrypt and rustls implementations, currently working with wolfSSL and curl.

Public Key

npub179eu5lkc7wklv8f44w6fz4qpc8gpkk2x8e32k7ha43pgvyj4jkqqqnr96e

NIP-05 Address

icing_at_chaos.social@mostr.pub

Profile Code

nprofile1qqs0zu720mv08t0kr566hdy32squr5qmt9rruc4t0t76cs5xzf2etqqpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qr26qgd

Publishing to

relay.mostr.pub

Author Public Key

npub179eu5lkc7wklv8f44w6fz4qpc8gpkk2x8e32k7ha43pgvyj4jkqqqnr96e

Show more details

Last Notes

2024-08-28 10:52:19

- reply

@npub12gt…xcxm You mean Malware sniffing dogs could possibly work?

2024-08-28 10:41:42

- reply

@npub1wwc…8xnt Right. Did not think of that.

2024-08-28 10:25:44

Why are there no DOG 6 and 8 cables?
All our social networks only use CATs. I think this explains a lot.🤨

2024-08-28 06:35:31

- reply

@npub19ue…uley One step closer to incompetence!😌

2024-08-27 10:22:49

- reply

@npub1rml…xa6t Of course, we at curl are open to someone 'donating' a few billion dollars per year to have another static ip for all requests.

2024-08-27 10:19:43

- reply

@npub1rml…xa6t Can you send me a copy? Yours is probably much more complete than mine...

2024-08-27 10:08:48

- reply

@npub1rml…xa6t We'll static resolve all name to 1.1.1.1 and let Cloudflare deal with it. Much simpler.

2024-08-27 06:23:14

- reply

@npub1txc…ajj9 Take this not as critisizm, just a parent concern from a non-expert.

2024-08-27 06:00:44

- reply

@npub1txc…ajj9 Aren’t they supposed to get sick at that age, so they‘ll be less sick later in life?

2024-08-26 05:46:09

The Verge states that the EU regulations actually do cause a better, more free iPhone. Wild commenting ensues…😉
Distrust Regulators! But also distrust Free Markets. One needs both of them to create freedom. Wasn‘t the US based on checks and balances once?
https://www.theverge.com/2024/8/24/24226946/iphone-eu-regulation-app-stores-fortnite?commentID=9fff21c7-e33e-4247-a59e-8a6e1eb1f8c9

2024-08-24 08:56:36

- reply

@npub1p45…89jz Well, we have to make sure your login credentials work.

2024-08-24 08:04:27

Curl discussion #14670, in which we find that NGINX handling of HEAD requests in HTTP/2 is faulty.
https://github.com/curl/curl/discussions/14670

2024-08-24 07:34:57

- reply

@npub1guv…6hel It is highly collaborative. And corporate software is not at all.
Competition is not the right word, I think. Parts apply. But it is more like making music.

2024-08-19 09:23:16

- reply

That is a net year, 24/7 without sleep or anything else.

2024-08-19 09:19:47

When I work a year on #curl that amounts to about 1.5 milliseconds spent on each installation.
Seems worth it.😌

2024-08-19 07:08:44

- reply

@npub150t…ravx the curl operating system, finally a Grand Plan!

2024-08-19 07:07:23

- reply

@npub150t…ravx you want `|` as a new option char?

2024-08-19 06:56:40

Ah, the curl feature window closed again and the pressure to invent new options ceases.😌

2024-08-18 21:01:25

- reply

@npub19nd…6qkl Every car AC here has .5 centigrades. You think car manufactures make different devices for each country? They just change the display, of course.

2024-08-18 07:35:45

Background: in a recent online discussion, a US person opined that Fahrenheit are superior to Celsius because he could set his AC which much more precision using Fahrenheit.
It must be baked into the internal physics of these devices, obviously.

2024-08-18 07:21:47

In Physics, a Theory of Everything would explain how Feet, Pound, Fahrenheit and the US date format can be used to describe our universe.

2024-08-17 21:16:26

- reply

@npub1rml…xa6t Aktualisierungslawinenkatastrophe. Gern geschehen. 😌

2024-08-17 10:19:31

- reply

@npub1p45…89jz I need to write more code, clearly. 😌

2024-08-17 07:49:15

We‘ve had 17 years of smartphones. And ~30 years of public internet.
While phones‘ hardware has had tremendous innovation, software on them did not.
https://www.techdirt.com/2024/08/16/and-just-like-that-pc-emulator-apps-are-allowed-on-apples-app-store-afterall/

2024-08-16 08:14:03

- reply

@npub1324…c2vq Congratz! 🙃
Sure you know the endless chain of second systems. It's basically a tradition now.

2024-08-16 07:03:11

Sonos seems really a great example of second system effect mixed with „we‘ll fix it later“ too-early releases.
Now they are stuck in a self-created no man‘s land of a redesigned cloud infrastructure, products needing the new app, customers rejecting it and losing faith.
All of their own making.
https://arstechnica.com/gadgets/2024/08/sonos-laying-off-100-people-amid-expensive-app-problems/
https://en.wikipedia.org/wiki/Second-system_effect

2024-08-16 06:39:48

„Dining across the divide“ lets two people with opposing views/backgrounds have dinner together. Then interviews them afterwards on how that went.
There is no winner or loser, there is no grand-standing (its just the two in a restaurant, no recording).
Totally the opposite of social media.
https://www.theguardian.com/lifeandstyle/article/2024/aug/15/dining-across-the-divide-bruno-michael

2024-08-15 12:11:41

- reply

Since the CVE lists everything from the initial version of Windows Server 2008, let it be known as the Ballmer Worm.😌

2024-08-15 11:35:05

The people on the "curl2" committee are monitoring the Sonos situation carefully. 😅

2024-08-15 06:18:36

„We, the big corporation/government agency, keep our suppliers on a tight leash. When we tell you to jump, you jump!
We mostly do not give you money at all - which we prefer - we generate ‚exposure‘ for you (we‘re not sure what that is exactly, but it seems to do the trick).
In the rare cases where we do owe you money, we have unwaivable payment terms that assure many of you have died of natural causes before we need to do anything.
Regards,
Some-Internal-Undecipherable-Acronym“

2024-08-15 05:52:33

- reply

@npub1dgs…nfw8 key growth areas👆

2024-08-14 06:56:49

- reply

@npub1p45…89jz Acshually, I blame the snake oil security scanners for all of this.

2024-08-14 06:54:41

- reply

@npub1p45…89jz Humans.💁🏻‍♂️

2024-08-14 06:26:02

A very amusing, sad, snarky thread on the sins of some ‚modern‘ languages. My kind of humour. 😌
https://social.treehouse.systems/@ariadne/112956048552199653

2024-08-13 12:00:22

5 PRs added today. It's too hot for more. k, thx, bye!🫡
https://github.com/curl/curl/pulls/icing

2024-08-13 11:33:32

While one part of the curl project works on improving robustness of test cases, the other part is adding CI jobs for more hostile environments.
Lots of synergy.😌

2024-08-13 07:22:36

Pupils right now: „I could not do my homework because there was a Massive DDoS attack!“🥸

2024-08-13 07:06:14

- reply

@npub1az9…swru To quote the richest man on earth: „civil war is inevitable“.

2024-08-13 06:20:19

The wealthiest town in Italy has regulations about installing ACs, to preserve the overall beauty of it.
The super-rich now snitch on each other, seemingly out of spite, reporting neighbours hidden ACs to the police.
Expect a Netflix series soon.💁🏻‍♂️
https://www.theguardian.com/world/article/2024/aug/12/portofino-air-con-crackdown-neighbours-italy

2024-08-12 12:24:06

- reply

@npub1chz…ha8y It's on my todo list!

2024-08-12 06:40:15

Some philosophies claim the universe is taken apart and then recreated every moment.
This about describes my mission in the curl project.😌

2024-08-12 06:31:15

- reply

@npub1e0g…y6fq 🤣

2024-08-12 06:24:14

The US Olympics team is 2nd place in medals, with a little bit of distance to the EU: 128 vs 308
Which is a bit unfair, since we had about 2 milleniae more time to practise the Olympics.💁🏻‍♂️
https://ec.social-network.europa.eu/@EUCommission/112944351137095290

2024-08-11 07:14:54

All the breakage news from Defcon show: we are unable to build tamper proof systems that actually do something.
And biology and medicine already knew this. We just did not listen.💁🏻‍♂️

2024-08-11 06:57:30

- reply

@npub17xj…0938 Does it have random access memory or is it rotating cores?

2024-08-10 08:03:29

- reply

@npub1p45…89jz Snark on the spur of the moment. Sorry for the people who are now having trouble with this.
It seems that Apple could improve its cooperation with OSS projects they depend on. Just a thought.

2024-08-10 07:35:17

- reply

@npub1p45…89jz Maybe Apple should consider switching older hardware to debian stable.

2024-08-09 07:19:44

I would be totally fine with Apple‘s platform fee if half of it would go to the OSS parts of their platform.
The current Apple way of playing silly games of hide and seek with the EU is rather embarassing, however.

2024-08-08 06:27:13

- reply

@npub1wpl…7d2c Mast- und Schotbruch!

2024-08-08 04:43:25

Well done, people of England!
As we‘ve seen here in Germany some months ago, the far right does not like being opposed by a visible majority in the streets.
https://www.theguardian.com/uk-news/article/2024/aug/07/thousands-of-anti-racism-protesters-take-to-streets-to-counter-far-right-rallies
https://assets.chaos.social/media_attachments/files/112/924/570/540/721/260/original/8731deefb98de4b5.png

2024-08-07 12:13:34

German satire magazine: „ Elon Musk threatens to sue everyone who is not buying a Cybertruck“
https://mastodon.social/@derpostillon/112920330277597587

2024-08-07 07:04:13

- reply

@npub1rml…xa6t If he wins, let‘s all sue the industry for not investing enough into us. Free money for everyone!😍

2024-08-07 06:57:46

- reply

@npub1wja…tznm Du hast einfach die Richtige im Leben getroffen. Glückwunsch!

2024-08-06 12:05:21

- reply

@npub1kys…gtlf Let's agree that they are mostly broken US ones...

2024-08-06 06:59:20

Again, today a 1000kg bomb from our friends in the UK/US needs to be defused in a major city. It has been buried in the ground for ~80 years.
We still need to do that several times each year. Do not let fascists rule your country. 👆
https://social.cologne/@koeln/112913725144571786

2024-08-06 06:51:34

- reply

@npub1wxs…zpe7 Indeed. Seems to be missing. 😉

2024-08-06 06:40:45

Looking at Apple‘s AI prompts,
the solution has been staring us in the face the whole time:
„Do not hallucinate. Do not make up factual information.“
Wow.🤣

2024-08-05 08:55:36

- reply

@npub1e2u…gz5y Instant desktop background. Thanks.

2024-08-05 08:13:30

- reply

@npub1p45…89jz You say bugfix, I say improvement.😌

2024-08-04 06:35:55

- reply

@npub1p45…89jz a typical „embrace extend extinguish“ move. 😌

2024-08-03 10:46:06

Watch @npub17cw…xt28 and the Debian curl maintainer team, discussing issues and the way forward at DebConf24:
https://saimei.ftp.acc.umu.se/pub/debian-meetings/2024/DebConf24/debconf24-472-curl-maintainers-bof.av1.webm
#curl #debian #debconf24

2024-08-02 19:15:11

- reply

@npub16hg…mtal I believe the hyperboles and putting people into corners for a „if you are not for us you‘re against us“ only makes things worse.
It‘s a war-like mentality. I see no good coming from that.

2024-08-02 10:15:28

- reply

@npub104e…r4uy The Internet is in the Middle Ages, warlords roam the lands, and everyone is accusing the siege engineers of not building walls good enough.

2024-08-02 07:15:52

Mastodon devs get a lot of flak these days for not solving the problems people have with abusers.
Don‘t do that to an OSS project and the people working on it. They are not obliged to solve your problems. They might want to, but are restricted to do so. In time, money, skill or depth of understanding.
Calling these devs racist for not solving the problem with racism is deeply unfair.

2024-08-01 17:53:05

- reply

@npub124a…nzee I initially was afraid so. But who knows?

2024-08-01 11:59:03

Very fun working in the #curl project, btw. Excellent people there, good coop, good vibes.
Issue reporters in general are experienced people where turnarounds are fast. Getting back with logs and verifying solutions.
Nice.😌

2024-08-01 11:49:00

- reply

@npub1rml…xa6t I think he would give them to me. But I don't trust myself and would probably go overboard with it.
Better have a calm, experienced Swede look them over...

2024-08-01 11:44:13

11 PRs of mine open for the curl project. This happens when @npub1p45…89jz goes on vacation and the feature window is closed.
I have a halting problem. Is there an Anonymous group for that?😌
https://github.com/curl/curl/pulls/icing

2024-08-01 11:31:08

- reply

@npub1rml…xa6t Sounds very AI!

2024-08-01 11:18:40

Why is it spelled 'transferred' and not 'transfered'?
Or is it just a reminder that transfers may err?

2024-08-01 07:27:05

Thinking about a curl kernel driver with live updates. Lots of potential.

2024-07-31 05:27:29

- reply

@npub1p45…89jz We‘ll need it for True Multipath QUIC, where one uses multiple implementations as well.😌

2024-07-30 16:24:57

There will be a Reckoning for all the atrocities that are currently being done in the name of Alien Intelligence.👾👽

2024-07-30 16:14:29

You add some tests to 10 year old code that never had them and people suddenly pop up with ideas of what I could do better.
Humans... 💁🏻‍♂️

2024-07-30 08:10:12

https://assets.chaos.social/media_attachments/files/112/874/422/421/808/627/original/cfa8c09bf4944c83.png

2024-07-30 05:51:51

Some good news: this year, we generated more electricity from renewables than fossil fuels here in central EU.
https://www.theguardian.com/environment/article/2024/jul/30/renewables-overtake-fossil-fuels-to-provide-30-of-eu-electricity

2024-07-29 06:11:28

„Noble Leisure“, according to Aristoteles, means to do things that need doing, for their own sake, not for money or fame.
That sounds like a good scale for Open Source Projects. To what degree is one done with Noble Leisure?
https://archive.blogs.harvard.edu/nobleleisure/aristotle-on-work-vs-leisure/

2024-07-27 06:37:31

On the day before launch you get the test environment finally somewhat working. You have not started setting up staging or production.
But don‘t worry. Many people before you have been in the same situation. The solution is obvious: Re-label.
Once everything works, you‘ll have plenty of time to setup staging. Maybe even test.
😌😉

2024-07-26 11:29:02

- reply

@npub19tg…0ysx Dabei fing es mit e-Sports Anfang dieses Jahrtausends so gut an!

2024-07-26 11:20:01

- reply

@npub19tg…0ysx Du glaubst nicht an die Zukunft von e-Gewichtheben?

2024-07-26 10:21:47

"strlcpy and how CPUs can defy common sense"
On a 512 byte string:
openbsd: 242us
glibc: 12us
https://nrk.neocities.org/articles/cpu-vs-common-sense

2024-07-26 08:58:47

Credit where it's due: it was @npub17cw…xt28 who make curl with HTTP/3 happen for Debian sid.
😍

2024-07-26 08:17:59

- reply

@npub1f4u…6pwy I would support that.

2024-07-26 08:08:20

A FOSS project like OpenSSL should be able to explain their choices without resorting to unverified, wishy-washy statements.
This has gone on long enough. Debian sid is now shipping curl with gnutls to enable HTTP/3. Gentoo is considering its options.
Talk to your distro of choice, if you want access to modern internet protocols. The alternatives are there.
https://mastodon.social/@bagder/112849149408818115

2024-07-26 07:24:03

Secure Boot is broken at least since 2022 when a ‚platform‘ key, an intermediate in the trust chain, was leaked on github.
„The encrypted [key] file, however, was protected by a four-character password“
And it was found:
„an additional 21 platform keys [in production] contain the strings “DO NOT SHIP” or “DO NOT TRUST.”
https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/

2024-07-26 06:53:18

„Every time you bite into a juicy Valencia orange, remember that you are the beneficiary of 1,000 years of dedicated communal water governance.“
On successfully managing „the commons“: https://www.theguardian.com/commentisfree/article/2024/jul/26/water-war-world-spain-crisis-los-angeles-cairo-valencia

2024-07-25 16:17:35

- reply

@npub17lg…9uux The Uber stock will skyrocket on the next global IT outage!

2024-07-25 12:41:26

- reply

@npub1rml…xa6t A wise decision.😀

2024-07-25 08:54:11

- reply

@npub1smu…juec They CRLs of all CAs on the internet are HUGE.

2024-07-25 06:36:22

It‘s 2024 and CRLs are the hot technology for managing certificate revocations.
I lived too long.😌

2024-07-25 05:50:00

https://www.theverge.com/2024/7/24/24204706/marc-andreessen-ben-horowitz-a16z-trump-donations

2024-07-24 10:00:09

curl vulnerabilities since version 4.0, as seen on https://curl.se/docs/vulnall.html
#curl
https://assets.chaos.social/media_attachments/files/112/840/879/177/943/515/original/4a903631cd4af33d.jpg

2024-07-24 06:31:15

Lets Encrypt on its plan to abandon OCSP.
https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html

2024-07-23 19:07:32

Soon compiler analyzers be like:
„Error, unused function ‚usage()‘: you never invoke your program with ‚-h‘,“
🤨

2024-07-23 07:33:52

- reply

@npub1pg3…9a8a You need more bits.💁🏻‍♂️

2024-07-23 06:58:18

- reply

@npub159y…uf43 The search index is full. All knowledge and things of interest have been collected.
You will soon be able to buy the internet from google on CD-ROM.😌

2024-07-23 06:15:17

Translating AV companies’ press releases.
https://assets.chaos.social/media_attachments/files/112/834/334/857/558/454/original/627258caea89c401.jpeg

2024-07-22 09:50:55

- reply

@npub14cm…7req Yes, it is what CrowdStrike stumbled over and what they did not design for.

2024-07-22 09:19:04

- reply

@npub14cm…7req It needs to come up with a good design and the efforts to implement it.
I though it was worth it.

2024-07-22 09:12:39

How Apache ACME (mod_md) gets you a new certificate:
1. all ACME communication are done as unprivileged user
2. all certificates from the CA are parsed as unpriviledged user before storing them
3. activation, as priviledged user, parses again before replacing production as a last fail safe.
Since 2017.
Typical over-engineering. What are the chances a CA sends you a borked file?