Curl Lead Developer: "We still have not seen a single valid security report done with AI help."
Curl Lead Developer: "We still have not seen a single valid security report done with AI help."
archive.is
archive.is
Daniel Stenberg is done with this shit.
That's it. I've had it. I'm putting my foot down on this craziness.
- Every reporter submitting security reports on #Hackerone for #curl now needs to answer this question:
"Did you use an AI to find the problem or generate this submission?"
(and if they do select it, they can expect a stream of proof of actual intelligence follow-up questions)
- We now ban every reporter INSTANTLY who submits reports we deem AI slop. A threshold has been reached. We are effectively being DDoSed. If we could, we would charge them for this waste of our time.
We still have not seen a single valid security report done with AI help.