BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Slop Spotting\, Using Rules to Detect AI Slop for Bu
 g Bounty\n   Tags: Bug Bounty Village | Creator Talk/Panel\n   When: Sunda
 y\, Aug 9\, 10:30 - 10:59 PDT\n   Where: LVCCW Level 1 Hall 3 1102 (Creato
 r Stage 6) - [1]Map\n\n   Description:\n\n   curl ended its HackerOne prog
 ramme in January 2026 after a steep rise\n   in AI-generated reports overw
 helmed a seven-person security team\, with\n   some weeks seeing seven rep
 orts in sixteen hours\, none valid. They\n   were all AI generated\; refer
 encing lines of code\, real\n   vulnerabilities\, and regression of resolv
 ed CVEs\, they looked\n   legitimate and if that code was actually in the 
 project would have\n   been valid. Every single report wasted the maintain
 ers time and the\n   platform they were using did nothing to help. Triagin
 g them is\n   expensive\, slow\, and demoralising for the humans at the ot
 her end\, the\n   only solution? Pay the platform to triage them for you. 
 This talk\n   introduces Slop Spotting: a lightweight triage methodology t
 hat uses\n   SAST rule generation as a validity signal. The core insight i
 s simple.\n   If a vulnerability is real and well-specified\, you should b
 e able to\n   write a SAST rule for it\, and if that code is actually in t
 he\n   codebase\, that SAST rule should have a result\, if it's slop\, eve
 n\n   convincing slop you get a yes/no answer very quickly across even lar
 ge\n   codebases.\n\n   Speakers:Katie Paxton-Fear\,Max vonBlankenburg\n\n
    SpeakerBio:  Katie Paxton-Fear\, Security Advocate\, Semgrep\n\n   i us
 ed to make applications and now I break them\, hacker\, bug bounty\n   hun
 ter\, and educational YouTuber.\n\n   SpeakerBio:  Max vonBlankenburg\, Se
 curity Researcher\, Semgrep\n\n   Max is a security research engineer at S
 emgrep\, doing their best to\n   make software break less. Max has worked 
 with smart contracts\, CTFs\n   and the software supply chain. Right now t
 hey’re interested in how\n   to use AI to help make security engineering
  easier and tip the scales\n   towards defenders.\n\n   '\n\n   1. #LVCCW_
 Level1_Hall3\n\n\n
DTEND:20260809T175900Z
DTSTART:20260809T173000Z
LOCATION:Bug Bounty Village - LVCCW Level 1 Hall 3 1102 (Creator Stage 6)
SUMMARY:Slop Spotting\, Using Rules to Detect AI Slop for Bug Bounty
END:VEVENT
END:VCALENDAR
