AI slop attacks on the curl project (froscon2025)
Chaos Computer Club - recent events feed · Daniel Stenberg
August 16, 202553m 0s
Audio is streamed directly from the publisher (cdn.media.ccc.de) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
In these days of "vibe coding" and chatbots, users ask AIs for help with everything. Asked to find security problems in Open Source projects, AI bots tell users something that sounds right. Reporting these "findings" wastes everyone's time and causes much frustration and fatigue. Daniel shows how this looks, how it creates a DDoS on projects and how totally beyond absurd this is. With examples and insights from the curl project.
Licensed to the public under http://creativecommons.org/licenses/by/4.0
about this event: https://programm.froscon.org/2025/events/3407.html
Topics
34072025froscon2025When the autopilot fails - Risks and side effects of AIHS 1/2froscon2025-engDay 1