daniel stenberg: The AI slop security reporting is basically extinct [in curl]... [bugs] are found with AI tools and normally high quality bug reports.

cm0002@lemdro.id · 17 hours ago

daniel stenberg: The AI slop security reporting is basically extinct [in curl]... [bugs] are found with AI tools and normally high quality bug reports.

Dumhuvud@programming.dev · 16 hours ago

Well, he did end the bug bounty program. There’s no reason for sloperators to waste their precious tokens anymore, is there?

TehPers@beehaw.org · 10 hours ago

Seems like that might just be curl. I’d guess it’s because they ended the bug bounty program for curl.

It’s good to see that the reports they get now are high quality bug reports now!

username_1@programming.dev · 17 hours ago

Removed by mod

BestBouclettes@jlai.lu · 16 hours ago

Yeah that’s pretty much his stance. AI tools like GPT or Gemini gave a bunch of non-developers the power to review things they don’t understand,with high confidence it’s the truth. His talk about this at FOSDEM was really insightful.

daniel stenberg: The AI slop security reporting is basically extinct [in curl]... [bugs] are found with AI tools and normally high quality bug reports.

daniel stenberg: The AI slop security reporting is basically extinct [in curl]... [bugs] are found with AI tools and normally high quality bug reports.

daniel:// stenberg:// (@bagder@mastodon.social)