After just having responded to the third #curl security report for the evening I noticed a post that cheered me up...

[demofox@mastodon.gamedev.place]

@bagder at my first professional game dev job in ~2006 I used libcurl to make our game talk to a web server for UGC uploads and downloads.
At my current game dev job I'm using libcurl to talk to a web service for internal telemetry of a game dev tool.
Thanks so much for the great library Daniel

[sociableporcupine@mastodon.ie]

@bagder Thank you for everything you do ️

[winniehell@mastodon.de]

@bagder that dependency on a single software or even person feels problematic to me (not your fault obviously) but I'm very grateful for one of my favorite command line tools! ️

[krafttea@mastodon.social]

@bagder Citations, or he doesn't exist!

[krono@toot.berlin]

@bagder well deserved.

[agowa338@chaos.social]

@bagder must be way more since nowadays also windows includes curl. So basically everything has it

[grendel84@tiny.tilde.website]

@bagder
You are my go to counter example when people claim

"No one would innovate without a profit motive"

[starkrg@myside-yourside.net]

@bagder You're not who I thought of when asked about who would be considered "heroes" in tech (as in names of note rather than necessarily virtuous), but I probably should have. At the time, off the top of my head I went with Kerninghan, Richie, Stallman, Torvalds, Turing, and Lovelace, my list could probably do with some expansion and revision, should I be asked the question again. I should also include the lady that wrote the software for the Apollo flight computers, whose name I should learn.

[davidak@chaos.social]

@winniehell does that really make sense when it is open source?

i think a single software project has potentially better quality and security compared to many with spread efforts. the challenge is to coordinate the efforts around one project and that is a social problem

of course depending on a single person is never good (bus factor)

[winniehell@mastodon.de]

@davidak I have no idea. my argument would be that zero-days don't appear in completely different pieces of software at the same time. but on the other hand that doesn't matter if the chance for zero-days is reduced.