AI slop attacks on the curl project - Daniel Stenberg

Daniel Stenberg · 46.5K views · 2025-08-16 · 53:01

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.

On Hacker News

HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.

Recommended by 1 HN people across 1 months · HN mentions 2025–2026

Topics

Software practice, open source & careers Security & hacking LLMs & generative AI

What people said

a235 · 2025-09 · Recommendation
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: [VIDEO] -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject [LINK]
Read the original HN comment ↗

jraph · 2026-01 · Reference
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] [VIDEO] (via [LINK] )
Read the original HN comment ↗

latexr · 2026-01 · Reference
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. [VIDEO]
Read the original HN comment ↗

Sources

Video by Daniel Stenberg, played through YouTube.

HN Library · Source license

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks

SaaS & AI candidates: Matches the configured criteria
Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources