Completely vibe-coded project it seems, even documentation. And yet:
Human-Origin Source License
Also love this:
You may not, without prior written permission from the Author:
- ship or maintain a modified version outside the contribution-purpose rules; - maintain a divergent private or internal fork; - port, clone, rebrand, or recreate the Covered Software; - create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation; or - use AI-assisted implementation mining to create, improve, test, document, or validate a Derivative Implementation.Look, I use AI too (mostly to speed things up by working on multiple items in parallel), but I’m not gonna stuff “human-origin source license” on anything I use it for, nor do I think creating API-compatible replacements, competing implementations, etc, should reasonably be possible to block with a license… Also, quite literally, he’s creating tools for reverse engineering, which in itself is generally in breach of the license of whatever software is being reverse engineered. Fuck off and use a FOSS license, whether it be permissive or copyleft…
Relevant XKCD:
apt-get install
sudo apt-get installsigh
How am I still learning about XKCDs I’ve never seen especially ones in the 1000 range.
Congrats on being one of today’s lucky 10,000!
So meta
When you first learnt about xkcd, did you not S L O O O R P the entire back catalogue?
I guess when I did that there were A LOT fewer. Cuz I’m old.
I’m so old I remember anticipating the 404
It’s the Key and Peele of geek comics
I can stop laughing at steamcmd.
Good. If you couldn’t that would be a real problem.
if $1 is not installed after that, wipe your hard drive and start over
It could be a crate…
Script needs to be updated, Rust wasn’t particularly popular back then (if it existed. I don’t know how old this one is, but it’s pretty old)
March 11, 2016 according to https://www.explainxkcd.com/wiki/index.php/1654:_Universal_Install_Script
According to the Rust Wikipedia article, it was juuuust starting to be used in real things around that period. Definitely before it was popular.
Is this satire or is it from a real project O_O?
it’s real, and not uncommon in AI projects. for example, in Hermes, to setup ComfyUI to work with it, you literally just prompt “setup comfyui” and it handles the install and configuration, including downloading any models you want.
I guess it’s good they’re dog fooding it?..I think?
This is… uh…
It reads like the author doesn’t know what containers are. Because this is actually a great use case for containers unless I’m missing something.
Now, do I want reverse engineering software from someone who in 2026 doesn’t know of a better way to manage dependencies than “tell AI to install everything”? Not particularly lol
Also:
Install Eclipse Adoptium 21: https://adoptium.net/temurin/releases/?version=21
It’s Eclipse Temurin not Eclipse Adoptium. And why not install from distro repo?
Install from https://cmake.org/download/
Also why not from distro repo?
Install Visual Studio 2022, or apt install build-essential / xcode-select --install
NOW distro repo is fine, but only if you use an APT based distro?
and then 3 more dependencies it tells the agent to install from websites.
The weirdest thing is you can get much better results from AI. I’m 99% sure this person gave the AI particularly bad instructions to generate the install instructions, or used a cheap, crappy model.
Please kill me
It is a self-contained runbook with explicit verification gates at every step — preflight checks, building libghidra, installing the LibGhidraHost Ghidra extension, building ghidrasql, and a first live query. Hand it to your agent and let it drive the install; intervene only if a gate reports a failure.
Even the install instructions are written by AI. Good grief
Look what they have to do to mimic a fraction of
tar -xaf!
I bloody hope the whole post is satire but given the anti-ai groupthink on lemmy, fuck knows!
Yes, it is the people who are against the corporate AI offerings who are guilty of groupthink, not me!
There are two big piles of groupthink here.
What a stupid comment
To be fair, there are local agentic models.
hey at least we actually think and don’t offload it to a machine.
If you trust the site,
curl | shis no worse than any other install method. If you don’t trust the site, it’s also no worse.yeah you can also just curl > cat and check the script yourself
Do you mean
curl | cator do you really want to create a file called cat?Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.
Also, your chance of spotting something bad in a malicious script is probably quite small.
This is my opinion on
curl | sh/bashtype directions. If the maintainers don’t provide a hash so I can confirm that is what they intended, there ain’t much I can do unless someone slapped in a function named “totallyNotMalware” into the script. I’ve looked through scripts, seen what they do, but I’m not good enough to recognize anything funky.
or just curl
I don’t know what the first one is about. Is it about how the Gemini webpage displays the output?cursed
Isn’t this actually kinda what AI is good for? I mean a simple task that just takes time and has step-by-step instructions, and you can just let it handle it and do it faster. Like its almost as good as writing a long script that just does it for the user?
The install process should be deterministic. When you run
sudo make installit should do the same thing every time you run it. If this process fails, it’s because of a missing dependency or permission issue or something like that. The failure should never be because of a statistically probability during installation that causes the installer to go off and do something wildly different.No. If you look at the instaal prompt, it is just a step by step instructionon how to check the environment, download the script, build the app, run the app, test if it is all good.
That is the whole install prompt. There is literally no need to waste a million tokens on that when a simple bash script can do it for free.
If you’re going to use AI for this, ask it to write you a bash script that does all these things. Maybe even a ps1 script to go with it.
Yeah, but I would never let an AI agent run commands on my machine without verifying each command. And at that point I would just rather copy and paste commands by hand, takes about the same time.
If the installation for example required creating some complicated host specific config files, then sure, I could see how that kind of a “runbook” could maybe be useful. But that doesn’t seem to be the case here.
Yeah, but I would never let an AI agent run commands on my machine without verifying each command.
I would never let an AI agent run commands on my machine, period.
Because that’s how you get “You’re absolutely right. I did make a mistake when I deleted your entire
/homeand/backupsdirectories while executing that command. Great job noticing the error!”honestly if your backup folder is on the same machine as your home folder you deserve everything that comes your way
Regardless of where your backup folder is, your machine needs writable access to it in order to make new backups.
And if an AI agent has root-level access on your machine (needs root to install things), then it will be able to access that backup folder and potentially be able to delete its contents.
A script uses much less power/water I suppose… And, wouldn’t you have to pay tokens for an AI to do those things? Or are you expected to set up a local model or something for this?
An agent installing that should not use that much power or water. The issue here is that you do not want an agent running on your system being able to install stuff from the internet
