1 HN user recommended this talk1 month2025–2026score 1
Years with an HN recommendation, 2007–2026
HN points to it when discussing AI-generated bug reports and vibe-coded pull requests burdening open source maintainers.
Daniel Stenberg's keynote at FrOSCon 2025 on AI slop attacks on the curl project, with examples of bogus AI-generated security reports. He discusses the toll on maintainers and why various countermeasures don't fit the project.
“Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples” (HN, 2025)
1 recommendations · 4 citations · Talks · news from the time
Maintainer or curl gave recently a talk on AI slop in security reports, showing this and other examples: [this video] -- AI slop attacks on the curl project - Daniel Stenberg. Keynote at the FrOSCon 2025 conference, August 16, in Bonn Germany by Daniel Stenberg. Plus, linked above, his blogpost on the same subject [link]
Curl maintainer's keynote on AI slop in security reports with examples.
Daniel Stenberg of curl gave a talk about some of what theyve been experiencing, mostly on the security beg bounty side. A bit hyperbolic, and his opinion is clear from the title, but I think a lot of maintainers feel similarly. “AI Slop attacks on the curl project” [this video]
Curl experiences with AI slop bug bounty reports, which many maintainers share.
> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review Hence the threat to shame publicly I suppose. Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk. [1] [this video] (via [link] )
Stenberg's earlier response to a similar proposal.
A lot of solutions have been suggested over the past few months, including those. They have drawbacks and it’s not how they want to run the project. [this video]
Talk on solutions tried and why they don't fit the project.
Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.
Plays via YouTube's privacy-enhanced embed
5 Hacker News comments
From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.
Citations, criticism and jokes