
AI slop attacks on the curl project - Daniel Stenberg
About this video
Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
Why it appears in the archive
HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
AI-generated summary and labels from the source dataset; verify important details against the video. Source & credits.
From the Hacker News discussion
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: [VIDEO] -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject [LINK]
Read original comment ↗last month curl developer Daniel Stenberg gave a talk "AI slop attacks on the curl project" : [VIDEO]
Read original comment ↗Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” [VIDEO]
Read original comment ↗> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] [VIDEO] (via [LINK] )
Read original comment ↗A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. [VIDEO]
Read original comment ↗