3 ms·

I guess you're right, but in this context it's clear by curl's author's blog post mentioned in my original post, that cause can be easily confused by less techn

by hgo 5y ago

I guess you're right, but in this context it's clear by curl's author's blog post mentioned in my original post, that cause can be easily confused by less technically savy readers.

xwolfi 5y ago
You mean absolute morons ? I'm sorry but your little war against ars technica will have to wait for an actual problem: saying you can exploit a vulnerability with cURL has really nothing to do with cURL... I mean who in the world woud think "oh then I need to delete cURL"? Sorry but your disdain for "less technical readers" is frankly insulting.
- detaro 5y ago
  You consider people sending death threats to developers because they think curl is some evil hacking tool not an "actual problem", despite it already having happened? We sadly share the world with "absolute morons", yes. (also, how is asking for a change a "war" against the publication?)
  - humanproxy 5y ago
    I am utterly stunned by the threat which Daniel Stenberg reports on his blog, the link above, frightened actually because before I got very far trying to think of ways to register for a icloud address as a throwaway email account, I realised that the threat was accompanied by no less than screen shots presumably from the same person's phone and if those are from a iPhone I'm pretty sure that the metadata in those images could verify if that's a real active and device and network subscription linked icloud account. The being HN I expect we automatically presume that everything is spoofed. Unfortunately having received death threats signed by the person's full name and someone identifiable in the media no less, I have to give it the possibility that that is the real person's name and icloud account identity and they simply don't care about anonymity because of having a completely dysfunctional mental condition. That's why this scared me. I'm becoming more and more aware of this kind of recklessness combined with the spectre of violence. Today in London in broad daylight a woman stabbed her victim amid a busy intersection crossing and carried on shouting at the victim "yeah I &ing stabbed you " over and over. Senses of proportion are long missing from broad society and I have started to think that like neurodegenerative diseases by the time we can't cover them up were done for. Edit : the reason I'm thinking about neurodegenerative diseases I think is because our understanding of social behaviour is rooted in a very brief attention to studying the world when there were simply very many fewer humans around in any way at liberty to act on their individual volition. The scale of our race in the present day I believe already requires a complete re-evaluation of models of civil order.
bigyikes 5y ago
I am interested in knowing which readers are technical enough to know or care what cURL is, but not technical enough to understand that the vulnerability isn’t in cURL itself.
- lallysingh 5y ago
  You can know that cURL is some app, she then give it's web pages on the internet.
- ldarby 5y ago
  Are you aware of this story: https://www.theregister.com/2006/03/24/tuttle_centos/ https://www.theregister.com/2006/03/24/tuttle_centos/ ?
deleted 5y ago
[deleted]

by hgo 5y ago

I guess you're right, but in this context it's clear by curl's author's blog post mentioned in my original post, that cause can be easily confused by less technically savy readers.

xwolfi 5y ago

You mean absolute morons ? I'm sorry but your little war against ars technica will have to wait for an actual problem: saying you can exploit a vulnerability with cURL has really nothing to do with cURL... I mean who in the world woud think "oh then I need to delete cURL"? Sorry but your disdain for "less technical readers" is frankly insulting.

detaro 5y ago
You consider people sending death threats to developers because they think curl is some evil hacking tool not an "actual problem", despite it already having happened? We sadly share the world with "absolute morons", yes. (also, how is asking for a change a "war" against the publication?)
- humanproxy 5y ago
  I am utterly stunned by the threat which Daniel Stenberg reports on his blog, the link above, frightened actually because before I got very far trying to think of ways to register for a icloud address as a throwaway email account, I realised that the threat was accompanied by no less than screen shots presumably from the same person's phone and if those are from a iPhone I'm pretty sure that the metadata in those images could verify if that's a real active and device and network subscription linked icloud account. The being HN I expect we automatically presume that everything is spoofed. Unfortunately having received death threats signed by the person's full name and someone identifiable in the media no less, I have to give it the possibility that that is the real person's name and icloud account identity and they simply don't care about anonymity because of having a completely dysfunctional mental condition. That's why this scared me. I'm becoming more and more aware of this kind of recklessness combined with the spectre of violence. Today in London in broad daylight a woman stabbed her victim amid a busy intersection crossing and carried on shouting at the victim "yeah I &ing stabbed you " over and over. Senses of proportion are long missing from broad society and I have started to think that like neurodegenerative diseases by the time we can't cover them up were done for. Edit : the reason I'm thinking about neurodegenerative diseases I think is because our understanding of social behaviour is rooted in a very brief attention to studying the world when there were simply very many fewer humans around in any way at liberty to act on their individual volition. The scale of our race in the present day I believe already requires a complete re-evaluation of models of civil order.

bigyikes 5y ago

I am interested in knowing which readers are technical enough to know or care what cURL is, but not technical enough to understand that the vulnerability isn’t in cURL itself.

lallysingh 5y ago
You can know that cURL is some app, she then give it's web pages on the internet.
ldarby 5y ago
Are you aware of this story: https://www.theregister.com/2006/03/24/tuttle_centos/ https://www.theregister.com/2006/03/24/tuttle_centos/ ?

deleted 5y ago

[deleted]