AI slop attacks on the curl project - Daniel Stenberg
Daniel Stenberg1 HN recommender · recommended in 1 month, 2025–2026
talk · general · 2025–2026 on HN
Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
Up next
11 mo on HN🚀 TDD, Where Did It All Go Wrong (Ian Cooper)
DevTernity Conference
11 HN recommender · 2018–2024
11 mo on HNBret Victor The Future of Programming
Joey Reid
12 HN recommender · 2017–2026
10 mo on HN"Uncle" Bob Martin - "The Future of Programming"
Paul Stringer's Mobile Tech
10 HN recommender · 2016–2022
10 mo on HNTim Ewald - Clojure: Programming with Hand Tools
ClojureTV
9 HN recommender · 2014–2024
9 mo on HNUsing Python to Code by Voice
Next Day Video
12 HN recommender · 2013–2025
9 mo on HNTransforming Code into Beautiful, Idiomatic Python
Next Day Video
9 HN recommender · 2014–2022
9 mo on HNAgile is Dead • Pragmatic Dave Thomas • GOTO 2015
GOTO Conferences
11 HN recommender · 2016–2026
8 mo on HNPlover: Thought to Text at 240 WPM
Next Day Video
8 HN recommender · 2014–2023
8 mo on HN"The Economics of Programming Languages" by Evan Czaplicki (Strange Loop 2023)
Strange Loop Conference
10 HN recommender · 2023–2026
8 mo on HN"The Mess We're In" by Joe Armstrong
Strange Loop Conference
10 HN recommender · 2014–2025
7 mo on HNPrinciples of Technology Leadership | Bryan Cantrill | Monktoberfest 2017
RedMonk Tech Events
9 HN recommender · 2018–2025
7 mo on HNA Talk Near the Future of Python (a.k.a., Dave live-codes a WebAssembly Interpreter)
David Beazley
7 HN recommender · 2019–2025
5 comments from Hacker News
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: ▶ this video -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject link
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] ▶ this video (via link )
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. ▶ this video
Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” ▶ this video
last month curl developer Daniel Stenberg gave a talk "AI slop attacks on the curl project" : ▶ this video