AI slop attacks on the curl project - Daniel Stenberg
Why Hacker News recommends it
HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
What it is
Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
Recommended by 1 HN commenters across 1 different months, 2025 to 2026.
What Hacker News said
Recommends a235 · 2025-09 · on “You did this with an AI and you do not understand what you're doing here”
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: [this video] -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject [LINK]
Cites shoo · 2025-09 · on “You did this with an AI and you do not understand what you're doing here”
last month curl developer Daniel Stenberg gave a talk "AI slop attacks on the curl project" : [this video]
Cites jonchurch_ · 2025-11 · on “Ask HN: How to deal with long vibe-coded PRs?”
Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” [this video]
Cites jraph · 2026-01 · on “We will ban you and ridicule you in public if you waste our time on crap reports”
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] [this video] (via [LINK] )
Cites latexr · 2026-01 · on “We will ban you and ridicule you in public if you waste our time on crap reports”
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. [this video]