# cURL

curl is an open-source command-line tool for transferring data with URLs; the curl project also produces the libcurl URL-transfer library.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Atomic macOS (AMOS) Stealer Activity

DevFeed: [Atomic macOS (AMOS) Stealer Activity](<https://devfeed.tech/articles/atomic-macos-amos-stealer-activity-30906.md>)

Original publisher: [Read original article](<https://unit42.paloaltonetworks.com/atomic-macos-amos-stealer-activity/>)

Author: Bradley Duncan

Published: 2026-09-16T10:00:06Z

Content type: article

Language: en

Sources: [Unit 42](<https://devfeed.tech/sources/unit-42.md>)

Topics: [Malware](<https://devfeed.tech/topics/malware.md>), [Aeternum](<https://devfeed.tech/topics/aeternum.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [sensitive data](<https://devfeed.tech/topics/sensitive-data.md>), [Zsh](<https://devfeed.tech/topics/zsh.md>), [ClickFix](<https://devfeed.tech/topics/clickfix.md>), [cURL](<https://devfeed.tech/topics/curl.md>)

Tags: [ads](<https://devfeed.tech/tags/ads.md>), [clickfix](<https://devfeed.tech/tags/clickfix.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [cryptocurrency](<https://devfeed.tech/tags/cryptocurrency.md>), [curl](<https://devfeed.tech/tags/curl.md>), [general](<https://devfeed.tech/tags/general.md>), [insights](<https://devfeed.tech/tags/insights.md>), [macos](<https://devfeed.tech/tags/macos.md>), [malware](<https://devfeed.tech/tags/malware.md>), [sensitive-data](<https://devfeed.tech/tags/sensitive-data.md>), [threat-intelligence](<https://devfeed.tech/tags/threat-intelligence.md>), [unit-42](<https://devfeed.tech/tags/unit-42.md>), [zsh](<https://devfeed.tech/tags/zsh.md>)

### AI overview

This article analyzes a laboratory-generated Atomic macOS (AMOS) stealer infection observed on Aug. 5, 2026. It describes a deceptive macOS toolkit installation page that led users to paste a command into Terminal, retrieving a Zsh script containing an encoded compressed payload and a follow-up script designed to run a Mach-O binary. AMOS targets macOS and can exfiltrate system information, login credentials, and sensitive data from applications including browsers and cryptocurrency wallets.

### Source excerpt

Modern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block these threats. The post Atomic macOS (AMOS) Stealer Activity appeared first on Unit 42.

## Security updates for Monday

DevFeed: [Security updates for Monday](<https://devfeed.tech/articles/security-updates-for-monday-17390.md>)

Original publisher: [Read original article](<https://lwn.net/Articles/1094211/>)

Author: jzb

Published: 2026-09-14T13:18:14Z

Content type: news

Language: en

Sources: [LWN.net](<https://devfeed.tech/sources/lwn-net.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Debian](<https://devfeed.tech/topics/debian.md>), [Fedora](<https://devfeed.tech/topics/fedora.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [Git](<https://devfeed.tech/topics/git.md>), [nginx](<https://devfeed.tech/topics/nginx.md>), [Python](<https://devfeed.tech/topics/python.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Elixir](<https://devfeed.tech/topics/elixir.md>), [F#](<https://devfeed.tech/topics/fsharp.md>), [Redis](<https://devfeed.tech/topics/redis.md>), [Rust](<https://devfeed.tech/topics/rust.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [debian](<https://devfeed.tech/tags/debian.md>), [elixir](<https://devfeed.tech/tags/elixir.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [git](<https://devfeed.tech/tags/git.md>), [nginx](<https://devfeed.tech/tags/nginx.md>), [python](<https://devfeed.tech/tags/python.md>), [redis](<https://devfeed.tech/tags/redis.md>), [rust](<https://devfeed.tech/tags/rust.md>), [security](<https://devfeed.tech/tags/security.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

Security updates were issued across AlmaLinux, Debian, Fedora, Gentoo, Mageia, Oracle, and SUSE. The affected software includes operating-system components, browsers, developer tools, programming-language packages, servers, libraries, and cloud-related utilities.

### Source excerpt

Security updates have been issued by AlmaLinux (389-ds-base, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, kernel, libkcapi, nginx, nodejs:22, nodejs:24, osbuild-composer, perl-YAML-Syck, postgresql16-postgis, ruby, ruby4.0, ruby:3.3, and vim), Debian (jbig2dec, kamailio, nginx, spip, and xorg-server), Fedora (baresip, bind, bluez, bubblewrap, chirp, chromium, cockpit, composer, corosync, darktable, dokuwiki, elixir, exiv2, expat, firefox, freerdp, freerdp2, gdk-pixbuf2, gegl04, golang-x-perf, grpcurl, kernel, kernel-headers, libevent, libmongocrypt, libpcap, libre, libsoup3, memcached, mingw-expat, mingw-openexr, mongo-c-driver, mrtg, nagios-plugins, nsd, nss, openssl, openvpn, PackageKit, pdns-recursor, perl-Net-OAuth, perl-XML-Bare, php-pecl-mongodb2, python-asteval, python-pip, rclone, rest, rust-hickory-net, rust-hickory-proto, rust-hickory-resolver, rust-ppmd-rust, rust-webbrowser, srt, syncthing, tar, tkimg, and valkey), Gentoo (Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi and Ruby), Mageia (bind, ffmpeg, glibc, java-17-openjdk, java-21-openjdk, librabbitmq, perl-Catalyst-Plugin-Static-Simple, perl-Imager, tor, and xz), Oracle (389-ds:1.4, ansible-core, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, gzip, httpd:2.4, image-builder, java-21-openjdk, kernel, mrtg, nginx, osbuild-composer, perl-DBI, postgresql16-postgis, python-lxml, python3.12-lxml, redis:6, and vim), SUSE (389-ds, ansible-core, ansible-creator, azure-storage-azcopy, cargo-audit, chromedriver, chromium, clamav, containerized-data-importer1.65, containerized-data-importer1.66, curl, dracut, ffmpeg-4, google-guest-agent, google-osconfig-agent, helm, java-1_8_0-ibm, jupyter-nbconvert, kernel, libpng16, libusb-1_0, libvirt, multipath-tools, NetworkManager, opensc, openssl-3, perl-Authen-SASL, perl-HTML-FormHandler, perl-Mojolicious, perl-Protocol-HTTP2, python-jwcrypto, python-sqlparse, python-tornado6, python313-geopy, python313-modelscope

## Security updates for Friday

DevFeed: [Security updates for Friday](<https://devfeed.tech/articles/security-updates-for-friday-8503.md>)

Original publisher: [Read original article](<https://lwn.net/Articles/1093765/>)

Author: jzb

Published: 2026-09-11T13:14:32Z

Content type: news

Language: en

Sources: [LWN.net](<https://devfeed.tech/sources/lwn-net.md>)

Topics: [Debian](<https://devfeed.tech/topics/debian.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Azure](<https://devfeed.tech/topics/azure.md>)

Tags: [azure](<https://devfeed.tech/tags/azure.md>), [debian](<https://devfeed.tech/tags/debian.md>), [ggml](<https://devfeed.tech/tags/ggml.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [oracle](<https://devfeed.tech/tags/oracle.md>), [python](<https://devfeed.tech/tags/python.md>), [ruby](<https://devfeed.tech/tags/ruby.md>), [security](<https://devfeed.tech/tags/security.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

Security updates have been issued across AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE, and Ubuntu for a broad set of system libraries, tools, runtimes, and applications.

### Source excerpt

Security updates have been issued by AlmaLinux (apr-util and qt6-qt5compat), Debian (libevent and ruby-rack), Fedora (bluez, corosync, curl, dokuwiki, grpcurl, libevent, and rest), Oracle (gstreamer1-plugins-bad-free, perl-DBI, python-urllib3, qt5-qtbase, qt6-qt5compat, and thunderbird), Red Hat (osbuild-composer), SUSE (azure-storage-azcopy, chromedriver, corosync, ggml-devel, helm, kernel, libmariadb-devel, libzypp, zypper, opensc, php7, tomcat10, and waylyrics), and Ubuntu (apache2, beets, glibc, kissfft, libebml, linux-nvidia-6.17, php8.1, php8.3, php8.5, and python2.7, python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.14).

## The thoroughness of Tom Johnson's free Documenting API's course on OpenAPI 3.0 and Swagger UI

DevFeed: [The thoroughness of Tom Johnson's free Documenting API's course on OpenAPI 3.0 and Swagger UI](<https://devfeed.tech/articles/the-thoroughness-of-tom-johnson-s-free-documenting-api-s-course-on-openapi-3-0-and-swagger-ui-22428.md>)

Original publisher: [Read original article](<https://www.tjmaher.com/2026/09/the-thoroughness-of-tom-johnsons-free.html>)

Author: T.J. Maher (noreply@blogger.com)

Published: 2026-09-09T21:17:32Z

Content type: article

Language: en

Sources: [T.J. Maher](<https://devfeed.tech/sources/t-j-maher.md>)

Topics: [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [Swagger](<https://devfeed.tech/topics/swagger.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-documentation](<https://devfeed.tech/tags/api-documentation.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [chrome-extension](<https://devfeed.tech/tags/chrome-extension.md>), [curl](<https://devfeed.tech/tags/curl.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [github](<https://devfeed.tech/tags/github.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [json](<https://devfeed.tech/tags/json.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [pdf](<https://devfeed.tech/tags/pdf.md>), [postman](<https://devfeed.tech/tags/postman.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [swagger](<https://devfeed.tech/tags/swagger.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article reviews Tom Johnson's free "Documenting APIs: A guide for technical writers and engineers" course. It describes the course's 17 chapters, practical API-learning exercises, coverage of REST APIs, OpenAPI, Swagger UI, testing and publishing API documentation, and a PDF edition exceeding 900 pages.

### Source excerpt

While researching information for my job about the Swagger UI and how it can be used for testing, I came across this free course, called Documenting APIs: A guide for technical writers and engineers at https://idratherbewriting.com/learnapidoc/docapis_overview.html written by Tom Johnson, a technical writer based in Seattle who works for Google. The course looks intense, containing 17 chapters talking about Introduction to REST APIs, using APIs like a developer, Documenting API endpoints, the Open API spec, Testing API docs, Publishing API docs, and more. From the Course Introduction: "You'll first learn about API documentation by using a simple weather API to put a weather forecast on your site. [...] As you use the API, you'll learn about endpoints, parameters, data types, authentication, curl, JSON, the command line, Chrome's Developer Console, JavaScript, and more. The idea is that rather than learning about these concepts independent of any context, you learn them by immersing yourself in a real scenario while using an API. Immersion in real scenarios makes these tools and technologies more meaningful. "We'll then transition into standards, tools, and specifications for REST APIs. You'll learn about the required sections in API documentation, analyze examples of REST API documentation from various companies, learn how to join an open-source project to get experience, and more. "[...] We'll also dive into specifications such as the OpenAPI specification and Swagger UI (which provides tooling for the OpenAPI specification). Additionally, you'll learn how to document native library APIs and generate Javadoc". Tom Johnson offers a PDF version of this free course... over 900 pages, with more always being added. It also offers many workshop-like activities you could put in an actual itinerary. You would need for the course: Chrome, since it provides "a Javascript Console that works well for inspecting JSON", the JSON Formatter Chrome extension, Postman, a GitHub acco

## Security updates for Wednesday

DevFeed: [Security updates for Wednesday](<https://devfeed.tech/articles/security-updates-for-wednesday-8496.md>)

Original publisher: [Read original article](<https://lwn.net/Articles/1093342/>)

Author: jzb

Published: 2026-09-09T13:04:46Z

Content type: news

Language: en

Sources: [LWN.net](<https://devfeed.tech/sources/lwn-net.md>)

Topics: [Debian](<https://devfeed.tech/topics/debian.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Chromium](<https://devfeed.tech/topics/chromium.md>), [systemd](<https://devfeed.tech/topics/systemd.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [.NET](<https://devfeed.tech/topics/net.md>)

Tags: [chromium](<https://devfeed.tech/tags/chromium.md>), [cli](<https://devfeed.tech/tags/cli.md>), [debian](<https://devfeed.tech/tags/debian.md>), [google](<https://devfeed.tech/tags/google.md>), [intel](<https://devfeed.tech/tags/intel.md>), [java](<https://devfeed.tech/tags/java.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [opentelemetry](<https://devfeed.tech/tags/opentelemetry.md>), [python](<https://devfeed.tech/tags/python.md>), [redis](<https://devfeed.tech/tags/redis.md>), [security](<https://devfeed.tech/tags/security.md>), [systemd](<https://devfeed.tech/tags/systemd.md>), [terraform](<https://devfeed.tech/tags/terraform.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

Security updates have been issued across AlmaLinux, Debian, Fedora, Mageia, Red Hat, SUSE, and Ubuntu for a broad set of packages, including kernels, systemd, Chromium, curl, Python, Java, Terraform provider components, and other system and developer tools.

### Source excerpt

Security updates have been issued by AlmaLinux (expat, glib2, microcode_ctl, mrtg, pam, redis, thunderbird, and valkey), Debian (fort-validator, gst-plugins-base1.0, kernel, and slurm-wlm), Fedora (complyctl, libevent, openvpn, and tar), Mageia (dovecot and spice-vdagent), Red Hat (ignition, opentelemetry-collector, and osbuild-composer), SUSE (amazon-ssm-agent, aws-nitro-enclaves-cli, bzip2, cadvisor, chromium, curl, distribution-registry, emacs, freeciv, fuse-overlayfs, gh, google-guest-agent, GraphicsMagick, hauler, insighttoolkit-devel, java-17-openjdk, libidn, libusb-1_0, libvirt, libvncserver, libzypp, zypper, lkl, lxd, multipath-tools, NetworkManager, perl-Net-DNS, perl-URI, python, python-authlib, python-sqlparse, python-tornado, python3, rpcbind, supergfxctl, systemd, terraform-provider-null, ucode-intel, wget, wireshark, and xen), and Ubuntu (curl, ffmpeg, glibc, hsqldb1.8.0, imagemagick, perl, and vim).

## curl 8.22.0

DevFeed: [curl 8.22.0](<https://devfeed.tech/articles/curl-8-22-0-18904.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/09/02/curl-8-22-0/>)

Author: Daniel Stenberg

Published: 2026-09-02T05:52:46Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Security](<https://devfeed.tech/topics/security.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [openssl](<https://devfeed.tech/topics/openssl.md>), [API](<https://devfeed.tech/topics/api.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [bugfixes](<https://devfeed.tech/tags/bugfixes.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [http](<https://devfeed.tech/tags/http.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

The curl 8.22.0 release includes six changes, 302 bug fixes, and nine curl/libcurl security fixes plus one wcurl fix. It adds Apple GSS Framework support, API guards, experimental HTTP Message Signatures support, and Apple fast UDP, while blocking NTLM fallback in SPNEGO and dropping TLS-SRP support.

### Source excerpt

Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presentation Numbers the 276th release6 changes70 days (total: 10,887)302 bugfixes (total: 14,489)525 commits (total: 39,608)0 new public libcurl function (total: 100)4 new ... Continue reading curl 8.22.0 ->

## There's a libcurl.dll in my system32

DevFeed: [There's a libcurl.dll in my system32](<https://devfeed.tech/articles/there-s-a-libcurl-dll-in-my-system32-18903.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/17/theres-a-libcurl-dll-in-my-system32/>)

Author: Daniel Stenberg

Published: 2026-08-17T21:27:36Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Library](<https://devfeed.tech/topics/library.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

The article explains why a vulnerable libcurl.dll found in Windows System32 cannot safely be upgraded generically. Different Windows applications may install or build libcurl separately, so the application owner must identify and update the specific DLL.

### Source excerpt

This afternoon I had a meeting with IT people at a huge US power infrastructure company. They had found a libcurl.dll file in their C:\Windows\System32 directory and asked us for help to upgrade it. Their vulnerability scanner identified it as vulnerable to several publicly known vulnerabilities. Can we bump it to the latest version please? ... Continue reading There's a libcurl.dll in my system32 ->

## curl performance

DevFeed: [curl performance](<https://devfeed.tech/articles/curl-performance-18902.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/14/curl-performance-2/>)

Author: Daniel Stenberg

Published: 2026-08-14T11:20:32Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Performance Testing](<https://devfeed.tech/topics/performance-testing.md>), [Development](<https://devfeed.tech/topics/development.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [git](<https://devfeed.tech/tags/git.md>), [performance](<https://devfeed.tech/tags/performance.md>), [performance-testing](<https://devfeed.tech/tags/performance-testing.md>), [shell-script](<https://devfeed.tech/tags/shell-script.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

This article describes an initial performance-testing effort for curl. It explains the difficulty of obtaining stable results on shared cloud infrastructure and outlines a local shell script that updates curl from git, builds it, runs tests, and records data and logs.

### Source excerpt

tldr: the live version is here: https://curl.se/perf/ How fast is "fast" and is it good enough? Does it run as fast now as it did before or was there a regression? What exactly needs to be fast? How fast is it? These are questions that many projects and products face, and in curl we are ... Continue reading curl performance ->

## curl Maintainers Report on a Month-Long Pause in Vulnerability Reporting

DevFeed: [curl Maintainers Report on a Month-Long Pause in Vulnerability Reporting](<https://devfeed.tech/articles/what-the-bliss-taught-us-18901.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/03/what-the-bliss-taught-us/>)

Author: Daniel Stenberg

Published: 2026-08-03T06:42:19Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

curl maintainers describe the results of pausing vulnerability reporting for the month of July 2026. They report receiving no actionable vulnerability reports during the pause, feeling relief, and using the time to review pull requests, improve documentation, and recharge.

### Source excerpt

At this exact moment curl's summer of bliss 2026 ends. We (the maintainers of curl) took the entire month of July off from vulnerability reporting and in this post I will try to explain how this went. (If you feel like skipping the wordy blab below, the single word answer is: fine) This was possibly ... Continue reading What the bliss taught us ->

## How we use /goal to find bugs in Patch the Planet

DevFeed: [How we use /goal to find bugs in Patch the Planet](<https://devfeed.tech/articles/how-we-use-goal-to-find-bugs-in-patch-the-planet-7659.md>)

Original publisher: [Read original article](<https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet/>)

Author: "Trail of Bits"

Published: 2026-07-28T11:00:00Z

Content type: article

Language: en

Sources: [The Trail of Bits Blog](<https://devfeed.tech/sources/the-trail-of-bits-blog.md>), [The Trail of Bits Blog](<https://devfeed.tech/sources/the-trail-of-bits-blog-2.md>)

Topics: [codex](<https://devfeed.tech/topics/codex.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [blog](<https://devfeed.tech/tags/blog.md>), [bugs](<https://devfeed.tech/tags/bugs.md>), [code](<https://devfeed.tech/tags/code.md>), [codex](<https://devfeed.tech/tags/codex.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [openai](<https://devfeed.tech/tags/openai.md>), [patch-the-planet](<https://devfeed.tech/tags/patch-the-planet.md>), [software](<https://devfeed.tech/tags/software.md>), [tool](<https://devfeed.tech/tags/tool.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article describes how Trail of Bits used Codex's /goal feature in Patch the Planet to find bugs in open-source software. It highlights results involving Rust, curl, Semgrep-based variant analysis, and potential Keycloak privilege-escalation issues, then discusses goal and prompt design techniques.

### Source excerpt

Codex's /goal feature amplifies bug hunting, but getting good results requires the right prompt, the right scope, and the right number of outcomes per run. For Patch the Planet, our joint initiative with OpenAI to find and fix bugs in open-source software, we pointed Codex at some of the most widely used, heavily audited codebases in the world, like Rust, curl, and zlib. One tool came up again and again in our internal bug-report channels: /goal, which hands Codex an open-ended objective and lets it work independently toward a success condition. Here are a few highlights: /goal found every Rust bug we submitted, including a soundness hole and a miscompilation now patched in Rust 1.98, from a single variant-analysis pipeline. It turned every project's past CVEs into Semgrep rules that had to fire on the vulnerable version and stay silent on the patched one, then flagged 11 variant hits across multiple projects. It uncovered two potential high-severity privilege-escalation bugs in Keycloak's SAML component during a discovery run. Over the first few weeks of Patch the Planet, our engineers independently converged on three techniques for using /goal. We found that getting the most out of /goal means treating the prompt as a set of specific success criteria, not a set of instructions. (Note that this blog post uses /goal to refer to goal-based prompting in general. Codex can also set goals for itself through a tool call, and that's how we recommend everyone use it; we rarely type the slash command ourselves.) 1. Let Codex write the goal The art of using /goal is prompt design, and we found that Codex knows Codex the best. Internally, our single most repeated /goal tip was to use Codex to help write each /goal prompt. We hand Codex threat model files and the context about what we're looking for, and then tell it to write the goal prompt. As mentioned before, /goal is a tool Codex can invoke on itself, and a few engineers stopped typing goals by hand entirely. $goal-prompt

## HTTP Message Signatures with curl

DevFeed: [HTTP Message Signatures with curl](<https://devfeed.tech/articles/http-message-signatures-with-curl-18900.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/27/http-message-signatures-with-curl/>)

Author: Daniel Stenberg

Published: 2026-07-27T06:55:03Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [digital-signatures](<https://devfeed.tech/tags/digital-signatures.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [experimental](<https://devfeed.tech/tags/experimental.md>), [git](<https://devfeed.tech/tags/git.md>), [hmac](<https://devfeed.tech/tags/hmac.md>), [http](<https://devfeed.tech/tags/http.md>), [production](<https://devfeed.tech/tags/production.md>), [release](<https://devfeed.tech/tags/release.md>)

### AI overview

curl experimentally supports HTTP Message Signatures based on RFC 9421, allowing users to sign selected HTTP request components with ed25519 or hmac-sha256 through new command-line and libcurl options. The feature must be explicitly enabled, is discouraged for production use, and is planned for curl 8.22.0.

### Source excerpt

The recently published RFC 9421 describes how to do HTTP Message Signatures, and starting just now, curl experimentally supports them. Message Signatures The specification describes this as a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. It is a way to verify that selected parts ... Continue reading HTTP Message Signatures with curl ->

## 1,500 curl authors

DevFeed: [1,500 curl authors](<https://devfeed.tech/articles/1-500-curl-authors-18899.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/25/1500-curl-authors/>)

Author: Daniel Stenberg

Published: 2026-07-25T14:29:28Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [git](<https://devfeed.tech/tags/git.md>)

### AI overview

The curl Git repository now includes contributions from 1,500 separate named individuals. The milestone follows the project surpassing 1,000 contributors four and a half years earlier, with Sameeh Jubran identified as the 1,500th author.

### Source excerpt

It takes a village to make curl. A rather big village. I have not been a solo maintainer of curl for a long time and I don't even do half of the commits anymore Since today, the curl git repository holds the accumulated efforts from 1,500 separate and named individuals. Only 4.5 years since we ... Continue reading 1,500 curl authors ->

## How to submit effective vulnerability reports to open-source projects

DevFeed: [How to submit effective vulnerability reports to open-source projects](<https://devfeed.tech/articles/do-excellent-vulnerability-reports-18895.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/06/29/do-excellent-vulnerability-reports/>)

Author: Daniel Stenberg

Published: 2026-06-29T07:47:43Z

Content type: tutorial

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [guide](<https://devfeed.tech/tags/guide.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This guide explains how to submit effective vulnerability reports to open-source projects, drawing on curl maintainers' experience with more than one thousand reports. It emphasizes describing the real security impact, understanding the software's documented behavior and limitations, and making reports easy for maintainers to handle.

### Source excerpt

Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time for me to try to help future reporters by providing a short guide on how to submit a truly excellent vulnerability report to an Open Source project. Researchers We ... Continue reading Do excellent vulnerability reports ->

## Run a vLLM Server on HF Jobs in One Command

DevFeed: [Run a vLLM Server on HF Jobs in One Command](<https://devfeed.tech/articles/run-a-vllm-server-on-hf-jobs-in-one-command-7559.md>)

Original publisher: [Read original article](<https://huggingface.co/blog/vllm-jobs>)

Author: Quentin Gallouédec

Published: 2026-06-26T00:00:00Z

Content type: tutorial

Language: en

Sources: [Hugging Face - Blog](<https://devfeed.tech/sources/hugging-face-blog.md>)

Topics: [jobs](<https://devfeed.tech/topics/jobs.md>), [vllm](<https://devfeed.tech/topics/vllm.md>), [API](<https://devfeed.tech/topics/api.md>), [inference-endpoints](<https://devfeed.tech/topics/inference-endpoints.md>), [model-deployment](<https://devfeed.tech/topics/model-deployment.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [GPU](<https://devfeed.tech/topics/gpu.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [gpu](<https://devfeed.tech/tags/gpu.md>), [guide](<https://devfeed.tech/tags/guide.md>), [inference](<https://devfeed.tech/tags/inference.md>), [inference-endpoints](<https://devfeed.tech/tags/inference-endpoints.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [jobs](<https://devfeed.tech/tags/jobs.md>), [json](<https://devfeed.tech/tags/json.md>), [model](<https://devfeed.tech/tags/model.md>), [models](<https://devfeed.tech/tags/models.md>), [python](<https://devfeed.tech/tags/python.md>), [vllm](<https://devfeed.tech/tags/vllm.md>)

### AI overview

A practical guide to launching a vLLM model server on Hugging Face Jobs with a single command, querying it through the OpenAI-compatible API, authenticating requests with an HF token, managing costs, and scaling to larger multi-GPU models. It also contrasts ephemeral Jobs with managed Inference Endpoints.

### Source excerpt

We're on a journey to advance and democratize artificial intelligence through open source and open science.

## Posting explains from tools (and not web browsers)

DevFeed: [Posting explains from tools (and not web browsers)](<https://devfeed.tech/articles/posting-explains-from-tools-and-not-web-browsers-33690.md>)

Original publisher: [Read original article](<https://www.depesz.com/2026/06/25/posting-explains-from-tools-and-not-web-browsers/>)

Author: depesz

Published: 2026-06-25T14:56:17Z

Content type: tutorial

Language: en

Sources: [select \* from depesz;](<https://devfeed.tech/sources/select-from-depesz.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Tool](<https://devfeed.tech/topics/tool.md>), [Website](<https://devfeed.tech/topics/website.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [cli](<https://devfeed.tech/tags/cli.md>), [curl](<https://devfeed.tech/tags/curl.md>), [data](<https://devfeed.tech/tags/data.md>), [explain-depesz-com](<https://devfeed.tech/tags/explain-depesz-com.md>), [json](<https://devfeed.tech/tags/json.md>), [tools](<https://devfeed.tech/tags/tools.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

This article explains how to post execution plans to explain.depesz.com using a tool such as curl and obtain JSON containing the information needed to extract a delete_key for later deletion.

### Source excerpt

Some time ago (well, a month ago) someone called zam6ak reached to me and asked about extraction of delete_key from plans posted using tool, and not website. Specifically they were doing something like: curl --silent --include \ --request "POST" "https://explain.depesz.com/" \ --data-urlencode "title=sample" \ --data-urlencode "plan@sample-plan.txt" \ --data-urlencode "query@sample-query.sql" \ --data-urlencode "is_public=0" Which worked, and ... Continue reading "Posting explains from tools (and not web browsers)"

## Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond

DevFeed: [Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond](<https://devfeed.tech/articles/behind-the-console-an-aitm-phishing-kit-harvesting-aws-console-credentials-and-beyond-8279.md>)

Original publisher: [Read original article](<https://securitylabs.datadoghq.com/articles/behind-the-console-aws-aitm-phishing-kit-and-beyond/>)

Author: Datadog

Published: 2026-06-24T00:00:00Z

Content type: article

Language: en

Sources: [Datadog Security Labs](<https://devfeed.tech/sources/datadog-security-labs.md>)

Topics: [Adversary-in-the-middle (AiTM)](<https://devfeed.tech/topics/adversary-in-the-middle-aitm.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Security](<https://devfeed.tech/topics/security.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [VirusTotal](<https://devfeed.tech/topics/virustotal.md>), [Batch file](<https://devfeed.tech/topics/batch-file.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Amazon Route 53](<https://devfeed.tech/topics/amazon-route-53.md>)

Tags: [adversary-in-the-middle-aitm](<https://devfeed.tech/tags/adversary-in-the-middle-aitm.md>), [aws](<https://devfeed.tech/tags/aws.md>), [batch](<https://devfeed.tech/tags/batch.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [dns](<https://devfeed.tech/tags/dns.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [mfa](<https://devfeed.tech/tags/mfa.md>), [security](<https://devfeed.tech/tags/security.md>), [virustotal](<https://devfeed.tech/tags/virustotal.md>)

### AI overview

Datadog Security Research analyzes a June 2026 campaign using cloned AWS console login pages and adversary-in-the-middle techniques to harvest credentials and MFA codes. The article details the phishing infrastructure, delivery methods, VirusTotal artifact, and JavaScript-based credential-harvesting flow.

### Source excerpt

Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.

## Trace any Vercel request from the CLI

DevFeed: [Trace any Vercel request from the CLI](<https://devfeed.tech/articles/trace-any-vercel-request-from-the-cli-1110.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/trace-any-vercel-request-from-the-cli>)

Author: z0oks

Published: 2026-06-03T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Vercel](<https://devfeed.tech/topics/vercel.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [OpenTelemetry](<https://devfeed.tech/topics/opentelemetry.md>), [Traces](<https://devfeed.tech/topics/traces.md>), [cURL](<https://devfeed.tech/topics/curl.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [curl](<https://devfeed.tech/tags/curl.md>), [opentelemetry](<https://devfeed.tech/tags/opentelemetry.md>), [terminal](<https://devfeed.tech/tags/terminal.md>), [traces](<https://devfeed.tech/tags/traces.md>), [update](<https://devfeed.tech/tags/update.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

### AI overview

Vercel CLI now supports generating OpenTelemetry Session Traces for requests and retrieving the resulting trace data by request ID. The feature is available on all plans.

### Source excerpt

You can now generate Session Traces through the Vercel CLI. Use the new vercel curl --trace command to generate an OpenTelemetry trace to the specified endpoint from the terminal. Use the new vercel traces get command to fetch the generated trace by request ID. Available on all plans. Update the Vercel CLI to the latest version and run vercel curl --trace to get started. Learn more about the vercel curl CLI command. Read more

## Why cURL is a practical debugger for HTTP problems

DevFeed: [Why cURL is a practical debugger for HTTP problems](<https://devfeed.tech/articles/a-love-letter-to-curl-the-world-s-most-underrated-debugger-38794.md>)

Original publisher: [Read original article](<https://fidelitas.io/2026/05/a-love-letter-to-curl/>)

Author: fidelitas.io

Published: 2026-05-17T08:15:00Z

Content type: opinion

Language: en

Sources: [fidelitas.io](<https://devfeed.tech/sources/fidelitas-io.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [debug](<https://devfeed.tech/topics/debug.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Unix](<https://devfeed.tech/topics/unix.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [headers](<https://devfeed.tech/tags/headers.md>), [http](<https://devfeed.tech/tags/http.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [unix](<https://devfeed.tech/tags/unix.md>)

### AI overview

This opinionated developer article argues that cURL is especially useful for debugging HTTP problems in production and remote environments where graphical clients may be unavailable. It contrasts cURL's debugging role with GUI clients' strengths in exploration, sharing, onboarding, and code generation, and introduces commonly useful command-line flags.

### Source excerpt

Postman is great. Insomnia is great. But the moment something goes wrong in production, the tool I reach for first is the one that's been on every Unix box since 1996.

## Use native curl syntax with Vercel CLI

DevFeed: [Use native curl syntax with Vercel CLI](<https://devfeed.tech/articles/use-native-curl-syntax-with-vercel-cli-1120.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/use-native-curl-syntax-with-vercel-cli>)

Author: Melkey Moksyakov

Published: 2026-05-15T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Vercel](<https://devfeed.tech/topics/vercel.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [curl](<https://devfeed.tech/tags/curl.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [update](<https://devfeed.tech/tags/update.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

### AI overview

Vercel CLI now supports native curl syntax, including full URLs, bare hostnames, the --url flag, and paths for linked projects.

### Source excerpt

You can now use native curl syntax with the Vercel CLI. The vercel curl command accepts full URLs, bare hostnames, and the --url flag, and uses your Vercel auth to bypass Deployment Protection. If you've linked a project, you can also pass just a path: Update to the latest Vercel CLI version and run vercel curl to get started. Learn more in the Vercel CLI documentation. Read more

## ClickHouse Release 26.2

DevFeed: [ClickHouse Release 26.2](<https://devfeed.tech/articles/clickhouse-release-26-2-5139.md>)

Original publisher: [Read original article](<https://clickhouse.com/blog/clickhouse-release-26-02>)

Author: ClickHouse

Published: 2026-03-16T10:47:57Z

Content type: release

Language: en

Sources: [ClickHouse Blog](<https://devfeed.tech/sources/clickhouse-blog.md>)

Topics: [clickhouse](<https://devfeed.tech/topics/clickhouse.md>), [data](<https://devfeed.tech/topics/data.md>), [datasets](<https://devfeed.tech/topics/datasets.md>), [JSON](<https://devfeed.tech/topics/json.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [real-time](<https://devfeed.tech/topics/real-time.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Terminal](<https://devfeed.tech/topics/terminal.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [bug](<https://devfeed.tech/tags/bug.md>), [clickhouse](<https://devfeed.tech/tags/clickhouse.md>), [community](<https://devfeed.tech/tags/community.md>), [contributors](<https://devfeed.tech/tags/contributors.md>), [data](<https://devfeed.tech/tags/data.md>), [datasets](<https://devfeed.tech/tags/datasets.md>), [features](<https://devfeed.tech/tags/features.md>), [json](<https://devfeed.tech/tags/json.md>), [production](<https://devfeed.tech/tags/production.md>), [real-time](<https://devfeed.tech/tags/real-time.md>), [release](<https://devfeed.tech/tags/release.md>), [server](<https://devfeed.tech/tags/server.md>), [streams](<https://devfeed.tech/tags/streams.md>)

### AI overview

ClickHouse 26.2 is a winter release with 25 new features, 43 performance optimizations, and 183 bug fixes. It makes the text index and QBit data type production-ready, adds time-based batching for infinite inserts, and improves joins, JSON parsing, and inserts using min-max indices. The article also demonstrates loading a real-time Wikimedia changes feed into ClickHouse.

### Source excerpt

ClickHouse 26.2 is here! In this post, text-index and QBit data type become production-ready.

## Automating Cloudflare Pages with the API

DevFeed: [Automating Cloudflare Pages with the API](<https://devfeed.tech/articles/automating-cloudflare-pages-with-the-api-10743.md>)

Original publisher: [Read original article](<https://eduuh.com/blog/automating-cloudflare-pages-with-api>)

Author: EduuhMuraya

Published: 2026-01-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [EduuhMuraya](<https://devfeed.tech/sources/eduuhmuraya.md>)

Topics: [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [API](<https://devfeed.tech/topics/api.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Amazon Route 53](<https://devfeed.tech/topics/amazon-route-53.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [dns](<https://devfeed.tech/tags/dns.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [my-blog](<https://devfeed.tech/tags/my-blog.md>)

### AI overview

A practical guide to automating Cloudflare Pages with its API and cURL. It explains how to configure staging and production domains to serve different branches, manage API credentials, and set up DNS records without using the dashboard.

### Source excerpt

The Cloudflare Pages dashboard is fine but I'd rather just curl things. Here's how I set up staging and production branches pointing to different domains without touching the UI.

## TLS Certificate Cheat Sheet - OpenSSL & Curl

DevFeed: [TLS Certificate Cheat Sheet - OpenSSL & Curl](<https://devfeed.tech/articles/tls-certificate-cheat-sheet-openssl-curl-31866.md>)

Original publisher: [Read original article](<https://www.metachris.dev/2025/09/tls-certificate-cheat-sheet-openssl-curl/>)

Author: Chris Hager

Published: 2025-09-22T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chris Hager](<https://devfeed.tech/sources/chris-hager.md>)

Topics: [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Cheat sheet](<https://devfeed.tech/topics/cheatsheet.md>), [openssl](<https://devfeed.tech/topics/openssl.md>), [cURL](<https://devfeed.tech/topics/curl.md>)

Tags: [certificates](<https://devfeed.tech/tags/certificates.md>), [cheat-sheet](<https://devfeed.tech/tags/cheat-sheet.md>), [curl](<https://devfeed.tech/tags/curl.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [tls](<https://devfeed.tech/tags/tls.md>), [tools](<https://devfeed.tech/tags/tools.md>)

### AI overview

A cheat sheet for creating, inspecting, signing, validating, and testing TLS certificates and related keys and CSRs using OpenSSL and cURL.

### Source excerpt

https://collective.flashbots.net/t/tls-certificates-know-how-quick-reference/5292

## Using Claude Code with Google Sheets

DevFeed: [Using Claude Code with Google Sheets](<https://devfeed.tech/articles/using-claude-code-with-google-sheets-20520.md>)

Original publisher: [Read original article](<https://code.dblock.org/2025/07/30/using-claude-code-with-google-sheets.html>)

Author: Daniel Doubrovkine (dblock@dblock.org)

Published: 2025-07-30T01:00:00Z

Content type: tutorial

Language: en

Sources: [Daniel Doubrovkine](<https://devfeed.tech/sources/daniel-doubrovkine.md>)

Topics: [Claude Code](<https://devfeed.tech/topics/claude-code.md>), [Google](<https://devfeed.tech/topics/google.md>), [API](<https://devfeed.tech/topics/api.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Code](<https://devfeed.tech/topics/code.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [api](<https://devfeed.tech/tags/api.md>), [claude](<https://devfeed.tech/tags/claude.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [cli](<https://devfeed.tech/tags/cli.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [curl](<https://devfeed.tech/tags/curl.md>), [google](<https://devfeed.tech/tags/google.md>), [install](<https://devfeed.tech/tags/install.md>), [tools](<https://devfeed.tech/tags/tools.md>), [troubleshooting](<https://devfeed.tech/tags/troubleshooting.md>)

### AI overview

This tutorial shows how to connect Claude Code to Google Sheets using Google Cloud, the Google Sheets API, Google Cloud CLI authentication with Drive access, and a curl request. It also demonstrates asking Claude Code to analyze spreadsheet data and describes authentication and project-configuration troubleshooting.

### Source excerpt

Let's get Claude Code to connect to Google Sheets. We'll use this Google Sample Spreadsheet. Go to the Google Cloud Console, create a new project, and enable the Google Sheets API on it. Install the Google Cloud CLI. brew install google-cloud-sdk Choose the newly created project on the command line. ~$ gcloud config set project gsheetscli Updated property [core/project]. Login again, but this time enable Google Drive access. gcloud auth login --enable-gdrive-access You can now access the spreadsheet with curl. curl -H "Authorization: Bearer $(gcloud auth print-access-token)" \ "https://sheets.googleapis.com/v4/spreadsheets/1BxiMVs0XRA5nFMdKvBdBZjgmUUqptlbs74OgvE2upms/values/Class%20Data" { "range": "'Class Data'!A1:V101", "majorDimension": "ROWS", "values": [ [ "Student Name", "Gender", "Class Level", "Home State", "Major", "Extracurricular Activity" ], ... ] } Let's ask Claude to do something useful. Let's ask Claude to do something useful. ~$ claude ╭───────────────────────────────────────────────────╮ │ ✻ Welcome to Claude Code! │ ╰───────────────────────────────────────────────────╯ > analyze the distribution of extracurricular activities in https://docs.google.com/spreadsheets/d/1BxiMVs0XRA5nFMdKvBdBZjgmUUqptlbs74OgvE2upms/edit?gid=0#gid=0 ⏺ I'll analyze the distribution of extracurricular activities from the Google Sheets document you provided. ⏺ Fetch(https://docs.google.com/spreadsheets/d/1BxiMVs0XRA5nFMdKvBdBZjgmUUqptlbs74OgvE2upms/edit?gid=0#gid=0) ⎿ Received 193.5KB (200 OK) ⏺ The extracurricular activities distribution shows perfect balance: Activity Distribution: - Drama Club: 5 students (16.7%) - Basketball: 5 students (16.7%) - Debate: 5 students (16.7%) - Lacrosse: 5 students (16.7%) - Baseball: 5 students (16.7%) - Track & Field: 5 students (16.7%) Total: 30 students across 6 activities Each activity has exactly 5 students participating, resulting in an even distribution with no activity being more popular than others in this dataset. Whoa. Troubles

## How to Hack the Base!

DevFeed: [How to Hack the Base!](<https://devfeed.tech/articles/how-to-hack-the-base-396.md>)

Original publisher: [Read original article](<https://supabase.com/blog/how-to-hack-the-base>)

Author: Stephen Morgan

Published: 2024-12-19T07:00:00Z

Content type: tutorial

Language: en

Sources: [Supabase Blog](<https://devfeed.tech/sources/supabase-blog.md>)

Topics: [Supabase](<https://devfeed.tech/topics/supabase.md>), [browser](<https://devfeed.tech/topics/browser.md>), [cURL](<https://devfeed.tech/topics/curl.md>), [Document Object Model (DOM)](<https://devfeed.tech/topics/dom.md>), [Developer Tools](<https://devfeed.tech/topics/developer-tools.md>), [HTML](<https://devfeed.tech/topics/html.md>), [Web app](<https://devfeed.tech/topics/webapp.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [curl](<https://devfeed.tech/tags/curl.md>), [games](<https://devfeed.tech/tags/games.md>), [hack](<https://devfeed.tech/tags/hack.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [html](<https://devfeed.tech/tags/html.md>), [tool](<https://devfeed.tech/tags/tool.md>), [web-app](<https://devfeed.tech/tags/web-app.md>), [web-browser](<https://devfeed.tech/tags/web-browser.md>)

### AI overview

Supabase describes its first hack-the-base challenge, reports participation and results, and provides a walkthrough for finding nine flags. The tutorial covers running the challenge app locally and using cURL, a web browser, the psql client, and optionally Burp Suite to inspect HTML and the DOM.

### Source excerpt

Played cool games, won cool prizes.

[Next page](<https://devfeed.tech/topics/curl.md?cursor=WyIyMDI0LTEyLTE5VDA3OjAwOjAwKzAwOjAwIiwgIjk0ZTAyYjExLWNjOGQtNDU5NS04MGNkLWVhZDg1YmE3Njg0NiJd>)