Talk: Keeping the World from Burning

Daniel Stenberg recently delivered a talk titled "Keeping the world from Burning" at the Nordic Software Security Summit in Stockholm, Sweden. The presentation focused on various security challenges faced by high-profile open-source projects, particularly those involving cURL and libcurl, which are used in billions of instances worldwide. Stenberg discussed issues such as bogus CVEs, conflicting databases, AI hallucinations, and inflated severity scoring, drawing on real-life examples to illustrate the complexities of maintaining security in open-source software. The talk was well-received, with many attendees referencing it in subsequent discussions. Since the event was not recorded, Stenberg plans to present the talk again via a live-stream on Twitch on September 30, 2024, at 14:00 UTC. This version will include some updates and refinements based on his previous experience. The session will be interactive, allowing for audience questions and engagement without any registration or fees required.

- Daniel Stenberg's talk addressed security challenges in open-source projects.

- The presentation will be live-streamed on Twitch on September 30, 2024.

- Key topics included bogus CVEs, conflicting databases, and AI hallucinations.

- The talk aims to provide insights for maintaining security in widely used software.

- Audience participation will be encouraged during the live-streamed session.