[Daniel's week] April 24, 2026

[Daniel Stenberg]

Hello!

Prepping for release and a talk next week, but some other things also took 
place...

## Security

I decided I should write something to explain to the world what the current 
avalanche of incoming security reports is like[3]. Right now it feels like I 
jinxed somewhat as we now actually have had several days of pause without a 
single report. Maybe the jokes about the raised prices on AI tokens being a 
reason actually have some merit?

The mythical model from one of the AI giants still has not been made available 
to us and as far as I can tell, no one else has used it on curl code either. I 
have been promised access and have been informed it is being delayed somewhat 
because of some issues unknown to me. I am mostly curious to see what issues 
improved models and improved tools can dig up. My experience has so far been 
that every time a new AI powered code analyzer effort has taken a stab at 
curl, it has resulted in dozens up to hundreds newly found issues. Rarely 
actual vulnerabilities, but mostly a long range of minor issues and errors in 
rarely traveled edge cases and forgotten option combinations.But of course we 
fix all the problems we learn about, big or small.

## Talks

My talk “Open Source AI Reality” next week at foss-north is going to be a 
walk-through and explanation about the journey from no AI, over AI slop to 
this high-quality chaos state we are in now.

## everything curl

At the end of this week I managed to get some time and inspiration to go 
through a bunch of the open issues for everything curl[4] and I added several 
new sections and a few thousand new words. As we keep adding and changing 
curl, leaving the book untouched for a while automatically translates into a 
bunch of things that should be explained but aren’t yet. At 118,000 words now!

There are still over ten issues open in the book’s GitHub repository about 
details that could be added and worked on.

## Coffee

I had yet another Swedish journalist over at my house for a coffee and a chat 
this week. We talked curl, Open Source, digital infrastructure and AI. His 
first article based on that interview was just posted[1].

## Anchor webinar

On Tuesday I joined Josh, Zack and Allan in a webinar panel discussion done by 
Anchore about “The Challenges of 3rd Party Software Risk”. It was great fun 
and it felt mostly like hanging out with friends for an hour. There is a video 
recording available [2].

## Coming up

- Monday/Tuesday: foss-north
- Wednesday: curl 8.20.0 release
- Wednesday: release video live-stream
- Friday: national holiday

## Links

[1] = https://www.realtid.se/it-tech/svenska-kodaren-nar-miljarder-anvandare-fran-vinden-i-huddinge/
[2] = https://vimeo.com/1185255000
[3] = https://daniel.haxx.se/blog/2026/04/22/high-quality-chaos/
[4] = https://everything.curl.dev/

-- 

  / daniel.haxx.se