
Daniel Stenberg
1 HN recommender · recommended in 3 months, 2025–2026
53:01 · 46K views · Aug 16, 2025
Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
5 comments from Hacker News
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: this video -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject [LINK]
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] this video (via [LINK] )
Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” this video
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. this video
last month curl developer Daniel Stenberg gave a talk "AI slop attacks on the curl project" : this video