cURL Scraps Bug Bounty Amid AI Slop Flood

The cURL project, a foundational tool for internet data transfer, is ending its vulnerability reward program. This decision, effective at the end of the month, stems from a significant increase in low-quality, AI-generated bug reports. Lead developer Daniel Stenberg emphasized the necessity of this action for the project's sustainability and the maintainers' well-being.

Stenberg noted that while AI can be a useful tool for bug discovery, many submissions are now from users simply prompting AI bots without understanding the output. This "AI slop" is overwhelming the small team. Previously, cURL has praised AI-assisted findings, but the current trend of bogus reports has forced a halt to its bounty program.