cURL Removes Bug Bounties
Summary
Slashdot reports that cURL will end its bug bounty program at the end of January to curb the flood of AI-generated bug reports. The coverage cites Elektroniktidningen and quotes from Daniel Stenberg and Joshua Rogers about the rationale and implications. The article ties this decision to broader tensions around AI-enabled security research and open-source vulnerability reporting.