Daniel Stenberg: 'The Pressure' — Curl Team Facing Unprecedented Deluge of AI-Generated Security Reports

Simon Willison's Blog·high signal

Curl creator Daniel Stenberg describes escalating pressure from AI-generated vulnerability reports that are 'credible' enough to require full investigation but overwhelmingly false — the real-to-fake ratio has dropped from 1-in-6 to 1-in-30. After shutting down HackerOne bug bounties in January 2026 over AI slop, the problem has intensified through direct GitHub reports. Stenberg warns that maintainer numbness from junk reports risks real vulnerabilities being missed across the software supply chain.