curl's 300k lines get intense scrutiny while critical infra runs on far less-audited code
kingslyj · x · 2026-10-18
Responding to a question about why curl's main source (under 300k lines) seems bug-dense, the author argues the opposite framing: curl is high-quality code under enormous scrutiny and is getting more secure by the half-day, while millions of lines with far less quality or scrutiny still power most of the world's critical infrastructure — the real risk lies in under-audited legacy systems, not in well-reviewed code.
More from coding & agent
- Clicky MCP Server queries web analytics via natural language — modelcontextprotocol · 2026-10-18
- CipherHUB ships 31 MCP cryptography tools spanning PQC and KMS — modelcontextprotocol · 2026-10-18
- Codex's new tab completion predicts your next move, and users love it — mark_k · 2026-10-18
- Open-source voxel editor ships MCP server letting Claude build and self-check 3D models — AbaGuy17 · 2026-10-18
- Dev ships AI-written game to 3 portals in an afternoon, Opus 5.5 did all the coding — Roger_M_Taylor · 2026-10-18
- 10 open-source repos to build a one-person AI content factory, from scripts to voiceovers — Roger_M_Taylor · 2026-10-18