4 ms·
Kinda burying the lede: AI tools found over a dozen CVEs in curl last year, and hundreds of bugs. "Primarily AISLE, Zeropath and OpenAI’s Codex Security have b
by readthenotes1 5mo ago
Kinda burying the lede:
AI tools found over a dozen CVEs in curl last year, and hundreds of bugs.
"Primarily AISLE, Zeropath and OpenAI’s Codex Security have been used to scrutinize the code with AI. These tools and the analyses they have done have triggered somewhere between two and three hundred bugfixes merged in curl through-out the recent 8-10 months or so. A bunch of the findings these AI tools reported were confirmed vulnerabilities and have been published as CVEs. Probably a dozen or more."
- toraway 5mo agoNot exactly "burying the lede" since Daniel already posted an update about it months ago [1] with extensive discussion in numerous of articles [2] including on this site [3]. [1] https://lists.haxx.se/pipermail/daniel/2025-September/000127.html https://lists.haxx.se/pipermail/daniel/2025-September/000127... [2] https://www.theregister.com/software/2025/10/02/curl-project-swamped-with-ai-slop-finds-not-all-ai-is-bad/588432 https://www.theregister.com/software/2025/10/02/curl-project... [3] https://news.ycombinator.com/item?id=45449348 https://news.ycombinator.com/item?id=45449348