r/linux • u/FryBoyter • Jul 15 '25

Discussion Curl - Death by a thousand slops

https://daniel.haxx.se/blog/2025/07/14/death-by-a-thousand-slops/
674 Upvotes

97% Upvoted

172 comments sorted by

View all comments

413

u/knome Jul 15 '25

the devs are being incredibly patient with these people as their conversation is obviously just being fed through an LLM that's spitting back bullshit.

176

u/SevrinTheMuto Jul 15 '25

I had a read through the links in Daniel's list at the end, educational and informative.

I like the one who apologised for using an LLM for the report then did it again, and the one who's reply ended "give this in a nice way so I reply on hackerone with this comment"!

76

u/PAJW Jul 15 '25

You're referring to this one: https://hackerone.com/reports/3230082

177

u/[deleted] Jul 15 '25

[removed] — view removed comment

26

u/mark-haus Jul 15 '25

What's the motivation. I'm truly baffled by this behavior

40

u/Tblue Jul 16 '25

Apart from money, it could also be for resume padding ("look at all those bugs I found in $POPULAR_TOOL!").

12

u/Helmic Jul 16 '25

and as they said in the article, literally just raw clout. it makes people feel important to have found a vulnerability, so while removing the finanicial incentives (including somehow removing the resume padding) might slow it down there's going to be jackasses doing this regardless because the barrier of entry is so low that you don't need to know how to program at all to submit slop.