@foosel that's the genuine "fix" for a reported security...

All posts daniel://'s posts Post Back to profile

Top-level

daniel:// stenberg://

@foosel that's the genuine "fix" for a reported security problem against some of their devices at the time, yes indeed

Like 15 April at 9:52 | Open on mastodon.social

7 comments

Gina Häußge

@bagder Yikes 😬

15 April at 10:16 | Open on chaos.social

Simon Zerafa :donor: :verified:

@bagder @foosel

So I assume that Curl can now present different User-Agent values as needed (assuming it didn't before, of course)?

Which given I very rarely use Curl is probably a very stupid question but give I could think of that as a potential issue/solution shows how monumentally ridiculous that bug fix really is 🫤🤦‍♂️

15 April at 10:50 | Open on infosec.exchange

Neil Craig

@simonzerafa @bagder @foosel It can indeed, there's a specific arg or you can use the generic `-H "header-name: header-value"` form.
Those have been a thing as long as I've been using curl 👍🏻.
https://curl.se/docs/manpage.html#-A