Skip to main content
Daniel Stenberg

Daniel Stenberg

Swedish software developerWikipedia

Search complete. 31 mentions across 13 episodes found for "Daniel Stenberg".

Oct 15, 2026

Johannes UllrichHOST
5:24
The malicious server can then trigger the remote code execution vulnerability.
Johannes UllrichHOST
5:29
Daniel Stenberg, the author of Curl, has a great detailed blog post about the vulnerability, how it happened, and how it was fixed.
Johannes UllrichHOST
5:38
There is a proof of concept available for this vulnerability, so something that you probably wanna fix if you are using Curl to upload files to servers that you don't fully trust.
Johannes UllrichHOST
5:53
Well, and that's it for today.
Christian HeilmannHOST
36:38
But then you have the issues with Photopea, for example, that if you're open source, that people just clone your stuff anyway, and then you get even more requests.
Christian HeilmannHOST
36:46
Or when we had, uh, Daniel Stenberg here on the show, when he says, like, he closed all resources because pe- he gets, like, 6,000 pull requests for curl a day that are AI generated nowadays.
Christian HeilmannHOST
36:57
So that's like moving a, a dark matter code into the open source world.
Christian HeilmannHOST
37:04
This is force, brute forcing it.
Steve GibsonHOST
58:58
That's basically job done for an engineer, as you can verify it right away." And they've had a few more.
Steve GibsonHOST
59:04
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
Steve GibsonHOST
59:11
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
Steve GibsonHOST
59:24
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
Steve GibsonHOST
58:58
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
Steve GibsonHOST
59:04
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
Steve GibsonHOST
59:11
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
Steve GibsonHOST
59:24
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c- c- you know, coming back toward w- willingness and openness to automated vulnerability solutions.
Steve GibsonHOST
58:58
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
Steve GibsonHOST
59:04
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
Steve GibsonHOST
59:11
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
Steve GibsonHOST
59:24
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
Dave SobelHOST
7:39
Here's what pushing back looks like.
Dave SobelHOST
7:42
Daniel Stenberg leads Curl, open source software that moves data inside an enormous range of products.
Dave SobelHOST
7:49
Its bug bounty paid out more than a hundred thousand dollars for eighty-seven confirmed vulnerabilities.
Dave SobelHOST
7:56
Then Stenberg measured what was arriving.
Steve GibsonHOST
93:26
What the podcast has barely touched on is the toll this takes on developers.
Steve GibsonHOST
93:33
For most people at my company, and the same goes for friends, there's no joy left in something many of us started learning as kids.
Steve GibsonHOST
93:43
Leo is excited about his agent cluster and what this technology makes possible.
Steve GibsonHOST
93:49
But for those of us who love the process rather than just the end product, it's a real blow.
Steve GibsonHOST
96:24
Now they're saying, "There's no le- there's no interaction left." You just say, "Write this," and, you know, it churns away and out comes code.
Leo LaporteHOST
96:35
I'm totally sympathetic.
Leo LaporteHOST
96:36
I have friends in that exact, uh, boat.
Leo LaporteHOST
96:38
You...
Steve GibsonHOST
93:26
What the podcast has barely touched on is the toll this takes on developers.
Steve GibsonHOST
93:33
For most people at my company, and the same goes for friends, there's no joy left in something many of us started learning as kids.
Steve GibsonHOST
93:43
Leo is excited about his agent cluster and what this technology makes possible.
Steve GibsonHOST
93:49
But for those of us who love the process rather than just the end product, it's a real blow.
Steve GibsonHOST
96:29
You just say, 'Write this,' and, you know, it churns away and out comes code."
Leo LaporteHOST
96:35
I'm totally sympathetic.
Leo LaporteHOST
96:36
I have friends in that exact, uh, boat.
Leo LaporteHOST
96:38
You...
Steve GibsonHOST
58:58
That's basically job done for an engineer, as you can verify it right away." And they had a few more.
Steve GibsonHOST
59:04
[chuckles] I did notice that they included Da- our old friend Daniel Stenberg of cURL fame.
Steve GibsonHOST
59:11
Uh, he was quoted saying, "We use all the state-of-the-art tools available to us to search for problems and strengthen our products and, and thereby hopefully keeping the world a little safer.
Steve GibsonHOST
59:24
OSS Scanner has helped us find multiple issues in cURL worthy of addressing, including one of the worst cURL vulnerabilities reported in the last few years." So we know that he was upset for a while, uh, and he's begun to, to seem like he's a little c-c- you know, coming back toward w-willingness and openness to automated vulnerability solutions.
Francesco CesariniHOST
0:50
So at the start of the se- of this year, you know, maintainers were laughing at AI bug reports.
Francesco CesariniHOST
0:55
Um, Daniel Stenberg, uh, the creator of Curl, shut down the bug bounty because the reports he was getting were just hallucinating junk.
Francesco CesariniHOST
1:03
And then in a space of a few weeks, maybe a month or two, everything, you know, the table turned over, everything switched.
Francesco CesariniHOST
1:13
The reports, you know, became real, and they kept on coming.

3 more episodes mention Daniel Stenberg.

Create an account to see the whole feed, search across every transcript, and follow the entities you care about.

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.