Tech News
← Home  ·  All topics

Curl

3 GoKawiil briefs on this topic

Show HN: GET Together lets users post to a social feed via plain GET requests

A hobby project called GET Together implements an entire social network—posting, replying, hearting and deleting—using only HTTP GET requests instead of POST. Posts are created by hitting URLs like /post?name=alice&text=hello, with an optional session cookie enabling later deletion, and a /feed endpoint returning JSON. The system includes basic profanity and crypto-content moderation, plus a reporting mechanism for abuse review.

AISLE's AI tool finds six curl CVEs days after OpenAI and Anthropic tools report none

After curl founder Daniel Stenberg ran OpenAI's Codex Security and Anthropic's Mythos against the widely-used curl codebase and got zero findings, AISLE's autonomous AI system produced 29 vulnerability reports. Six of those were validated by curl's security team and assigned CVE identifiers, all rated Low severity, and fixed in the newly released curl 8.22.0.

Curl Defends Its Own CVE Assignment Process Amid Scrutiny

The curl project explains that after becoming a CVE Numbering Authority (CNA) years ago, it now independently issues its own CVE identifiers for security flaws in its codebase, having assigned 57 so far. The maintainers describe a rigorous assessment process that grades each report as LOW, MEDIUM, HIGH, or CRITICAL, and note that some minor issues are deliberately left without a CVE if the risk of exploitation is deemed negligible.