Starting February 1st, curl will no longer offer rewards through HackerOne. Bug reports will only be accepted via GitHub after January 31st. Stenberg also warned that anyone submitting “junk” reports will be banned and publicly shamed.
He explained that the team was overwhelmed by “AI slop”—reports that either didn’t find real bugs or were just plain wrong. This flood of useless reports was stressing out the small team, even affecting their mental health.
All of this thanks to a wave of people using AI to spam useless reports, wasting the devs’ time while not contributing to anything.
Once again AI ruins something good.
