Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
Why Hacker News points people here: HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
“Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples”HN comment, 2025
“Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples”
Curl maintainer's keynote on AI slop in security reports with examples.
Full comment
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: this video -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject link
Cites itshooSep 2025
“last month curl developer Daniel Stenberg gave a talk”
Daniel Stenberg's talk on AI slop attacks on curl.
Full comment
last month curl developer Daniel Stenberg gave a talk "AI slop attacks on the curl project" : this video
Cites itjonchurch_Nov 2025
“I think a lot of maintainers feel similarly.”
Curl experiences with AI slop bug bounty reports, which many maintainers share.
Full comment
Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” this video
Cites itjraphJan 2026
“Daniel Stenberg previously responded to this proposal the same way as me”
Stenberg's earlier response to a similar proposal.
Full comment
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] this video (via link )
Cites itlatexrJan 2026
“They have drawbacks and it’s not how they want to run the project.”
Talk on solutions tried and why they don't fit the project.
Full comment
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. this video
