For open source software, AI is very much a mixed blessing in his view.

The New Stack is a publication covering trends and technologies in cloud-native development, DevOps, and software delivery. Developers can learn about containerization, Kubernetes, and cloud computing, as well as explore topics such as microservices architecture, serverless computing, and continuous integration/continuous delivery (CI/CD) pipelines.

The New Stack

Daniel Stenberg, creator of cURL, discusses how AI is both helping and harming open source projects. AI-generated security reports have flooded cURL's bug bounty program, with only 1 in 20-30 reports now being accurate (down from 1 in 6), forcing the program's shutdown. However, AI-powered analysis tools have also discovered over 100 legitimate bugs that traditional methods missed. Stenberg warns that while AI analyzers can find deep issues across protocols and specs, AI-generated code contributions remain unreliable. He urges the open source community to balance AI's benefits against the burden of spam reports and exploitation by large companies that find bugs but don't contribute fixes or funding.

cURL’s Daniel Stenberg: AI slop is DDoSing open source

How cURLs bug bounty program created the incentives for AI slop security reports

What do you do with all the real bugs AI can find?