В этой заметке мы разберём, что такое экспертиза и в чём её суть. Она бывает разной глубины, сферы и предназначения. Экспертиза не может существовать без теоретических знаний, опыта и, конечно же, не...

Миллионы метрик, чистый код, но аллокатор показывает в разы больше памяти, чем должно занимать «полезное» содержимое. Профайлер светит на парсинг, а вы гадаете: куда деваются мегабайты? Привет, меня...

If you work with secret keys — signing keys, API tokens, anything that must not leak — you’ve probably written this happy little line and felt good about it: 1 secret.zeroize(); Wiped! Auditor happy, you happy. And honestly, that line is doing real work.…

Yes, but the name is a psychological trick.

A few years years ago the curl project signed up and became a CNA. This means that we are masters of and can allocate our own CVE identifiers. For any security problems within our territory, it is we who decides if the issue should get a CVE or not. No more…

Trailing dots after hostnames in URLs remain my worst enemies. I wrote about several problems with them in the past that involved those nasty things. They are still painful. When we shipped curl 8.21.0 on June 24 2026 we fixed at least three brand new problems…

Two conferences in one. You can see France in the distance but then they pour wine from a can into plastic glass to remind you where you are.

You're asking for it to cancel, but it doesn't wait for confirmation.

Figuring out how it went missing.

Subtlety.

Pure Virtual C++ is back for its 7th year! Join us on July 21 for a free, one-day virtual conference for the whole C++ community.

One of my favorite visuals for known vulnerabilities in curl is the mountain. It shows how many currently known vulnerabilities were present in the code through-out curl's history. In the end of June 2026 it looks like this: Over time we get more vulnerabilities…

Представьте, что вы едете в ночном поезде. Чтобы гарантированно выйти на нужной станции, придется не спать всю ночь и внимательно отслеживать остановки. Свою станцию вы не пропустите, но сойдете с...

https://cppcon.org/
---
C++ The Documentary: Live Panel Discussion with Bjarne Stroustrup, Herb Sutter & More

Watch C++: The Documentary: https://www.youtube.com/watch?v=lI7tMxzSJ7w

Following the New York City premiere at Metrograph, Matt Godbolt moderates…

Tying two bugs together.

tl;dr This blog post describes a recent SmallVector::push_back optimization for approximately trivially copyable element types. SmallVector is LLVM's most-used container, and push_back its hot operati