• boonhet@sopuli.xyz
    12·
    57 minutes ago

    Completely vibe-coded project it seems, even documentation. And yet:

    Human-Origin Source License

    Also love this:

    You may not, without prior written permission from the Author:

    - ship or maintain a modified version outside the contribution-purpose
  rules;
- maintain a divergent private or internal fork;
- port, clone, rebrand, or recreate the Covered Software;
- create an API-compatible replacement, behavioral clone, competing
  implementation, or Derivative Implementation; or
- use AI-assisted implementation mining to create, improve, test,
  document, or validate a Derivative Implementation.

    Look, I use AI too (mostly to speed things up by working on multiple items in parallel), but I’m not gonna stuff “human-origin source license” on anything I use it for, nor do I think creating API-compatible replacements, competing implementations, etc, should reasonably be possible to block with a license… Also, quite literally, he’s creating tools for reverse engineering, which in itself is generally in breach of the license of whatever software is being reverse engineered. Fuck off and use a FOSS license, whether it be permissive or copyleft…

    • Luminous5481 "Enemy of the State"@anarchist.nexusEnglish
      2·
      30 minutes ago

      it’s real, and not uncommon in AI projects. for example, in Hermes, to setup ComfyUI to work with it, you literally just prompt “setup comfyui” and it handles the install and configuration, including downloading any models you want.

      • boonhet@sopuli.xyz
        8·
        1 hour ago

        This is… uh…

        It reads like the author doesn’t know what containers are. Because this is actually a great use case for containers unless I’m missing something.

        Now, do I want reverse engineering software from someone who in 2026 doesn’t know of a better way to manage dependencies than “tell AI to install everything”? Not particularly lol

        Also:

        Install Eclipse Adoptium 21: https://adoptium.net/temurin/releases/?version=21

        It’s Eclipse Temurin not Eclipse Adoptium. And why not install from distro repo?

        Install from https://cmake.org/download/

        Also why not from distro repo?

        Install Visual Studio 2022, or apt install build-essential / xcode-select --install

        NOW distro repo is fine, but only if you use an APT based distro?

        and then 3 more dependencies it tells the agent to install from websites.

        The weirdest thing is you can get much better results from AI. I’m 99% sure this person gave the AI particularly bad instructions to generate the install instructions, or used a cheap, crappy model.

      • jqubed@lemmy.world
        20·
        4 hours ago

        It is a self-contained runbook with explicit verification gates at every step — preflight checks, building libghidra, installing the LibGhidraHost Ghidra extension, building ghidrasql, and a first live query. Hand it to your agent and let it drive the install; intervene only if a gate reports a failure.

    • ReCursing@feddit.ukEnglish
      541·
      4 hours ago

      I bloody hope the whole post is satire but given the anti-ai groupthink on lemmy, fuck knows!

  • Unleaded8163@fedia.io
    22·
    4 hours ago

    If you trust the site, curl | sh is no worse than any other install method. If you don’t trust the site, it’s also no worse.

      • FishFace@piefed.socialEnglish
        6·
        2 hours ago

        Do you mean curl | cat or do you really want to create a file called cat?

        Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.

        Also, your chance of spotting something bad in a malicious script is probably quite small.

        • cenzorrll@piefed.caEnglish
          3·
          1 hour ago

          This is my opinion on curl | sh/bash type directions. If the maintainers don’t provide a hash so I can confirm that is what they intended, there ain’t much I can do unless someone slapped in a function named “totallyNotMalware” into the script. I’ve looked through scripts, seen what they do, but I’m not good enough to recognize anything funky.

  • 🇳 🇨 🇸 🇰 @lemmy.world
    625·
    4 hours ago

    Isn’t this actually kinda what AI is good for? I mean a simple task that just takes time and has step-by-step instructions, and you can just let it handle it and do it faster. Like its almost as good as writing a long script that just does it for the user?

    • bamboo@lemmy.blahaj.zoneEnglish
      15·
      2 hours ago

      The install process should be deterministic. When you run sudo make install it should do the same thing every time you run it. If this process fails, it’s because of a missing dependency or permission issue or something like that. The failure should never be because of a statistically probability during installation that causes the installer to go off and do something wildly different.

    • abbadon420@sh.itjust.works
      591·
      4 hours ago

      No. If you look at the instaal prompt, it is just a step by step instructionon how to check the environment, download the script, build the app, run the app, test if it is all good.

      That is the whole install prompt. There is literally no need to waste a million tokens on that when a simple bash script can do it for free.

      If you’re going to use AI for this, ask it to write you a bash script that does all these things. Maybe even a ps1 script to go with it.

    • JRaccoon@discuss.tchncs.de
      271·
      4 hours ago

      Yeah, but I would never let an AI agent run commands on my machine without verifying each command. And at that point I would just rather copy and paste commands by hand, takes about the same time.

      If the installation for example required creating some complicated host specific config files, then sure, I could see how that kind of a “runbook” could maybe be useful. But that doesn’t seem to be the case here.

      • OwOarchist@pawb.socialEnglish
        14·
        3 hours ago

        Yeah, but I would never let an AI agent run commands on my machine without verifying each command.

        I would never let an AI agent run commands on my machine, period.

        Because that’s how you get “You’re absolutely right. I did make a mistake when I deleted your entire /home and /backups directories while executing that command. Great job noticing the error!”

        • Lauchmelder@feddit.org
          12·
          3 hours ago

          honestly if your backup folder is on the same machine as your home folder you deserve everything that comes your way

          • OwOarchist@pawb.socialEnglish
            6·
            2 hours ago

            Regardless of where your backup folder is, your machine needs writable access to it in order to make new backups.

            And if an AI agent has root-level access on your machine (needs root to install things), then it will be able to access that backup folder and potentially be able to delete its contents.

    • Cabslock@lemmy.world
      19·
      4 hours ago

      A script uses much less power/water I suppose… And, wouldn’t you have to pay tokens for an AI to do those things? Or are you expected to set up a local model or something for this?

      • JensSpahnpasta@feddit.org
        61·
        4 hours ago

        An agent installing that should not use that much power or water. The issue here is that you do not want an agent running on your system being able to install stuff from the internet