3 ms·

> this seems like it could be a security issue waiting to happen for games that use that xcurl lib from Microsoft, since it seems they don't keep up with upstre

by cxr 3y ago

> this seems like it could be a security issue waiting to happen for games that use that xcurl lib from Microsoft, since it seems they don't keep up with upstream and will miss important patches And at the same time, missing out on the continual stream of bugs that are being put in. (I found it interesting how Daniel was able to give such a positive spin to the comment, "We merge bugfixes at a rate of around three bugfixes per day.")

freedomben 3y ago
This was my thought as well. Software that is as mature and well-defined as curl, I would be shocked to see three bug fixes per day. That means it is getting lots of new features / new code. That's not a bad thing necessarily, but most of the people that I know who use curl have been using it the exact same way for many years. A version that is a few years old would definitely not need three bug fixes a day