Curl project founder snaps over deluge of time-sucking AI slop bug reports

Curl founder Daniel Stenberg announced measures to curb a surge of AI-generated, low-quality vulnerability reports via HackerOne—requiring reporters to disclose AI use, subjecting such reports to rigorous validation, and banning offenders—arguing the trend amounts to a DDoS on maintainers’ time. He reports that none of the AI-assisted submissions in recent years have been legitimate and cites a recent bogus HTTP/3 exploit claim referencing nonexistent functions, echoing broader concerns from other open-source leaders about burnout and wasted resources.