• FauxLiving@lemmy.world
    link
    fedilink
    arrow-up
    20
    ·
    27 天前

    You may as well just completely replace your package manager with this one simple script.

    #!/usr/bin/env python3
    import sys
    
    exec(TrustedAgent.request(f"Write a Python statement to install {sys.argv[1]}, make no mistakes"))
    
      • jqubed@lemmy.world
        link
        fedilink
        arrow-up
        9
        ·
        27 天前

        It is a self-contained runbook with explicit verification gates at every step — preflight checks, building libghidra, installing the LibGhidraHost Ghidra extension, building ghidrasql, and a first live query. Hand it to your agent and let it drive the install; intervene only if a gate reports a failure.

      • boonhet@sopuli.xyz
        link
        fedilink
        arrow-up
        5
        ·
        27 天前

        This is… uh…

        It reads like the author doesn’t know what containers are. Because this is actually a great use case for containers unless I’m missing something.

        Now, do I want reverse engineering software from someone who in 2026 doesn’t know of a better way to manage dependencies than “tell AI to install everything”? Not particularly lol

        Also:

        Install Eclipse Adoptium 21: https://adoptium.net/temurin/releases/?version=21

        It’s Eclipse Temurin not Eclipse Adoptium. And why not install from distro repo?

        Install from https://cmake.org/download/

        Also why not from distro repo?

        Install Visual Studio 2022, or apt install build-essential / xcode-select --install

        NOW distro repo is fine, but only if you use an APT based distro?

        and then 3 more dependencies it tells the agent to install from websites.

        The weirdest thing is you can get much better results from AI. I’m 99% sure this person gave the AI particularly bad instructions to generate the install instructions, or used a cheap, crappy model.

        • JRaccoon@discuss.tchncs.de
          link
          fedilink
          arrow-up
          1
          ·
          27 天前

          I think it’s written that way because the instructions are meant to work on Windows too. But it still doesn’t make much sense. I think just saying “Install CMake” and letting the agent figure it out for the current environment would be a much better approach.

          Also, I think the model they were using was working with outdated data. Why specifically require Java 21 when Java 25 is the latest LTS? And furthermore, why even link to a specific JDK implementation when it surely works with almost any implementation? Probably just makes the agent install the Temurin implementation even if the system already had a working java.

          My point being if the author’s idea is to let AI handle the installation to avoid writing environment-specific instructions, it shouldn’t then have these hardcoded assumptions about the environment. So yeah, it seems they (and the AI that wrote it) didn’t really know what they were doing.

    • it’s real, and not uncommon in AI projects. for example, in Hermes, to setup ComfyUI to work with it, you literally just prompt “setup comfyui” and it handles the install and configuration, including downloading any models you want.

    • ReCursing@feddit.uk
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      9
      ·
      27 天前

      I bloody hope the whole post is satire but given the anti-ai groupthink on lemmy, fuck knows!

  • Mikina@programming.dev
    link
    fedilink
    arrow-up
    10
    ·
    edit-2
    27 天前

    While I’m not a fan of most AI usages, this is the thing that infuriates me the most.

    I like writing scripts to automate parts of my job. I’ve had a few for things like build performance testing comparison and the like.

    All of it was replaced by skill.md, that does exactly the same, but burns like 3$ per run in tokens, and has also at least once generated hallucinated results, because it ran into an error, ran wrong builds, or in general fucked up in a way that was not easy to detect (and we did in fact not detect it until much later).

    But hey, at least my colleagues now don’t have to open the filthy commandline and write py perf-test.py main feature/branch to run the test, and can just talk about it to a clanker.

  • boonhet@sopuli.xyz
    link
    fedilink
    arrow-up
    8
    ·
    27 天前

    Completely vibe-coded project it seems, even documentation. And yet:

    Human-Origin Source License

    Also love this:

    You may not, without prior written permission from the Author:

    - ship or maintain a modified version outside the contribution-purpose
      rules;
    - maintain a divergent private or internal fork;
    - port, clone, rebrand, or recreate the Covered Software;
    - create an API-compatible replacement, behavioral clone, competing
      implementation, or Derivative Implementation; or
    - use AI-assisted implementation mining to create, improve, test,
      document, or validate a Derivative Implementation.
    

    Look, I use AI too (mostly to speed things up by working on multiple items in parallel), but I’m not gonna stuff “human-origin source license” on anything I use it for, nor do I think creating API-compatible replacements, competing implementations, etc, should reasonably be possible to block with a license… Also, quite literally, he’s creating tools for reverse engineering, which in itself is generally in breach of the license of whatever software is being reverse engineered. Fuck off and use a FOSS license, whether it be permissive or copyleft…

    • qarbone@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      27 天前

      “No! Nuh uh! You can’t prompt Claude to do what it did for me, again! I did it first and called ‘dibs’ on ever doing it again!”

    • criss_cross@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      26 天前
      - ship or maintain a modified version outside the contribution-purpose
        rules;
      - maintain a divergent private or internal fork;
      - port, clone, rebrand, or recreate the Covered Software;
      - create an API-compatible replacement, behavioral clone, competing
        implementation, or Derivative Implementation; 
      

      At that point why bother making your codebase public?

  • Artisian@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    27 天前

    We can do even better: just post the readme+prompts used to design the software, and let the users AI agent recode it themselves! Perfectly secure.

  • JakenVeina@midwest.social
    link
    fedilink
    arrow-up
    7
    ·
    27 天前

    You may not, without prior written permission from the Author…create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation

    Loooooooooooooool. “You’re not allowed to reverse-engineer this reverse-engineering tool.”

  • Unleaded8163@fedia.io
    link
    fedilink
    arrow-up
    5
    ·
    27 天前

    If you trust the site, curl | sh is no worse than any other install method. If you don’t trust the site, it’s also no worse.

  • Dima@feddit.uk
    link
    fedilink
    arrow-up
    4
    ·
    27 天前

    Unfortunately not the first time I’ve seen this sort of thing: Screenshot of install instructions with "Option A: Let an LLM do it"
    (I don’t use this project, just came across it)

    • AeonFelis@lemmy.world
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      27 天前

      I’ll give it a pass because it’s an OpenCode plugin, meaning the typical user is not tech-savvy enough to be able to edit a simple JSON configuration file.