
Daniel Stenberg
Swedish software developerWikipedia
31
MENTIONS
13
EPISODES
13
PODCASTS
Search complete. 31 mentions across 13 episodes found for "Daniel Stenberg".
Oct 15, 2026
SANS Stormcast Thursday, October 15th, 2026: Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP/2 RCE
J
5:24Johannes UllrichHOST
The malicious server can then trigger the remote code execution vulnerability.
J
5:29Johannes UllrichHOST
Daniel Stenberg, the author of Curl, has a great detailed blog post about the vulnerability, how it happened, and how it was fixed.
J
5:38Johannes UllrichHOST
There is a proof of concept available for this vulnerability, so something that you probably wanna fix if you are using Curl to upload files to servers that you don't fully trust.
J
5:53Johannes UllrichHOST
Well, and that's it for today.
WeAreDevelopers LIVE - Read More, Prompt Less
C
36:38Christian HeilmannHOST
But then you have the issues with Photopea, for example, that if you're open source, that people just clone your stuff anyway, and then you get even more requests.
C
36:46Christian HeilmannHOST
Or when we had, uh, Daniel Stenberg here on the show, when he says, like, he closed all resources because pe- he gets, like, 6,000 pull requests for curl a day that are AI generated nowadays.
C
36:57Christian HeilmannHOST
So that's like moving a, a dark matter code into the open source world.
C
37:04Christian HeilmannHOST
This is force, brute forcing it.
Security Now 1100: Booby Trapping LLMs
S
58:58Steve GibsonHOST
That's basically job done for an engineer, as you can verify it right away." And they've had a few more.
S
59:04Steve GibsonHOST
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
S
59:11Steve GibsonHOST
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
S
59:24Steve GibsonHOST
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
Security Now 1100: Booby Trapping LLMs
S
58:58Steve GibsonHOST
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
S
59:04Steve GibsonHOST
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
S
59:11Steve GibsonHOST
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
S
59:24Steve GibsonHOST
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c- c- you know, coming back toward w- willingness and openness to automated vulnerability solutions.
SN 1100: Booby Trapping LLMs - AI Frenzy in Cybercrime
S
58:58Steve GibsonHOST
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
S
59:04Steve GibsonHOST
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
S
59:11Steve GibsonHOST
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
S
59:24Steve GibsonHOST
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
AI for MSPs: Nobody Is Counting the Cleanup
D
7:39Dave SobelHOST
Here's what pushing back looks like.
D
7:42Dave SobelHOST
Daniel Stenberg leads Curl, open source software that moves data inside an enormous range of products.
D
7:49Dave SobelHOST
Its bug bounty paid out more than a hundred thousand dollars for eighty-seven confirmed vulnerabilities.
D
7:56Dave SobelHOST
Then Stenberg measured what was arriving.
SN 1100: Booby Trapping LLMs - AI Frenzy in Cybercrime
S
93:26Steve GibsonHOST
What the podcast has barely touched on is the toll this takes on developers.
S
93:33Steve GibsonHOST
For most people at my company, and the same goes for friends, there's no joy left in something many of us started learning as kids.
S
93:43Steve GibsonHOST
Leo is excited about his agent cluster and what this technology makes possible.
S
93:49Steve GibsonHOST
But for those of us who love the process rather than just the end product, it's a real blow.
S
96:24Steve GibsonHOST
Now they're saying, "There's no le- there's no interaction left." You just say, "Write this," and, you know, it churns away and out comes code.
L
96:35Leo LaporteHOST
I'm totally sympathetic.
L
96:36Leo LaporteHOST
I have friends in that exact, uh, boat.
L
96:38Leo LaporteHOST
You...
Security Now 1100: Booby Trapping LLMs
S
93:26Steve GibsonHOST
What the podcast has barely touched on is the toll this takes on developers.
S
93:33Steve GibsonHOST
For most people at my company, and the same goes for friends, there's no joy left in something many of us started learning as kids.
S
93:43Steve GibsonHOST
Leo is excited about his agent cluster and what this technology makes possible.
S
93:49Steve GibsonHOST
But for those of us who love the process rather than just the end product, it's a real blow.
S
96:29Steve GibsonHOST
You just say, 'Write this,' and, you know, it churns away and out comes code."
L
96:35Leo LaporteHOST
I'm totally sympathetic.
L
96:36Leo LaporteHOST
I have friends in that exact, uh, boat.
L
96:38Leo LaporteHOST
You...
Security Now 1100: Booby Trapping LLMs
S
58:58Steve GibsonHOST
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
S
59:04Steve GibsonHOST
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
S
59:11Steve GibsonHOST
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
S
59:24Steve GibsonHOST
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
Ingela Andin on the TLS Stack Running Under Every BEAM App
F
0:50Francesco CesariniHOST
So at the start of the se- of this year, you know, maintainers were laughing at AI bug reports.
F
0:55Francesco CesariniHOST
Um, Daniel Stenberg, uh, the creator of Curl, shut down the bug bounty because the reports he was getting were just hallucinating junk.
F
1:03Francesco CesariniHOST
And then in a space of a few weeks, maybe a month or two, everything, you know, the table turned over, everything switched.
F
1:13Francesco CesariniHOST
The reports, you know, became real, and they kept on coming.
3 more episodes mention Daniel Stenberg.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.