Is this satire or is it from a real project O_O?
This is… uh…
It reads like the author doesn’t know what containers are. Because this is actually a great use case for containers unless I’m missing something.
Now, do I want reverse engineering software from someone who in 2026 doesn’t know of a better way to manage dependencies than “tell AI to install everything”? Not particularly lol
Also:
Install Eclipse Adoptium 21: https://adoptium.net/temurin/releases/?version=21
It’s Eclipse Temurin not Eclipse Adoptium. And why not install from distro repo?
Install from https://cmake.org/download/
Also why not from distro repo?
Install Visual Studio 2022, or apt install build-essential / xcode-select --install
NOW distro repo is fine, but only if you use an APT based distro?
and then 3 more dependencies it tells the agent to install from websites.
The weirdest thing is you can get much better results from AI. I’m 99% sure this person gave the AI particularly bad instructions to generate the install instructions, or used a cheap, crappy model.
I think it’s written that way because the instructions are meant to work on Windows too. But it still doesn’t make much sense. I think just saying “Install CMake” and letting the agent figure it out for the current environment would be a much better approach.
Also, I think the model they were using was working with outdated data. Why specifically require Java 21 when Java 25 is the latest LTS? And furthermore, why even link to a specific JDK implementation when it surely works with almost any implementation? Probably just makes the agent install the Temurin implementation even if the system already had a working java.
My point being if the author’s idea is to let AI handle the installation to avoid writing environment-specific instructions, it shouldn’t then have these hardcoded assumptions about the environment. So yeah, it seems they (and the AI that wrote it) didn’t really know what they were doing.
it’s real, and not uncommon in AI projects. for example, in Hermes, to setup ComfyUI to work with it, you literally just prompt “setup comfyui” and it handles the install and configuration, including downloading any models you want.
I guess it’s good they’re dog fooding it?..I think?
I bloody hope the whole post is satire but given the anti-ai groupthink on lemmy, fuck knows!
Yes, it is the people who are against the corporate AI offerings who are guilty of groupthink, not me!
To be fair, there are local agentic models.
I dont think local agentic models address the ethical and environmental concerns I have with the training - but its better than the corporate offerings :)
Hey guy/gal/genderfluid pal, the cat is out of the bag. Either we embrace it for what it can do in a much more sustainable way, or we let corpos redefine sustainable.
Is this a good use case? No. But most use cases, I’d rather have a local agent running on my own hardware being offset by solar, than using a corpo offering.
Please don’t call me man :)
The cat is “out of the bag” on consuming meat and dairy, plenty of people manage to survive and thrive without em, without much effort at all. I’d personally rather use no LLM than use a local agentic model with poor ethics/environmental impact of its training, even if the latter is better than corpo offerings.
As I alluded to, I’m much happier to see people using local agentic models. Even more so if they happen to be something like Pleias’ approach, with lots of transparency about the data they were trained on. There’s still the environmental concerns behind the resources consumed for the training, but it is about as good as one could hope for at this point if one insists on using LLMs.
As you wish, wasn’t meant as a gendered ident so apologies.
I’m actually not familiar with how much environmental damage is done by training vs using. My initial assumption was that training would be less, by many many factors, because it “happens once” while the usage is constant and scales with the number of users. But that is admittedly an assumption made out of ignorance.
And to be clear, I’m not really trying to tell you you’re wrong, just trying to make my position clear since Lemmy is very anti AI in general.
There are two big piles of groupthink here.
What a stupid comment
Eh, mine added value to the conversation. Your “what a stupid comment” comment made no such effort. So hey, swings and roundabouts!
No it didn’t
Ok bye
hey at least we actually think and don’t offload it to a machine.
They saw curl | bash and were like you know what the problem with this is? It’s deterministic
While I’m not a fan of most AI usages, this is the thing that infuriates me the most.
I like writing scripts to automate parts of my job. I’ve had a few for things like build performance testing comparison and the like.
All of it was replaced by skill.md, that does exactly the same, but burns like 3$ per run in tokens, and has also at least once generated hallucinated results, because it ran into an error, ran wrong builds, or in general fucked up in a way that was not easy to detect (and we did in fact not detect it until much later).
But hey, at least my colleagues now don’t have to open the filthy commandline and write
py perf-test.py main feature/branchto run the test, and can just talk about it to a clanker.Completely vibe-coded project it seems, even documentation. And yet:
Human-Origin Source License
Also love this:
You may not, without prior written permission from the Author:
- ship or maintain a modified version outside the contribution-purpose rules; - maintain a divergent private or internal fork; - port, clone, rebrand, or recreate the Covered Software; - create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation; or - use AI-assisted implementation mining to create, improve, test, document, or validate a Derivative Implementation.Look, I use AI too (mostly to speed things up by working on multiple items in parallel), but I’m not gonna stuff “human-origin source license” on anything I use it for, nor do I think creating API-compatible replacements, competing implementations, etc, should reasonably be possible to block with a license… Also, quite literally, he’s creating tools for reverse engineering, which in itself is generally in breach of the license of whatever software is being reverse engineered. Fuck off and use a FOSS license, whether it be permissive or copyleft…
Was it not ruled that API compatibility was not copyright infringement? (Oracle Vs Google.) I don’t think the last two are even enforceable.
You may not, without prior written permission from the Author…create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation
Loooooooooooooool. “You’re not allowed to reverse-engineer this reverse-engineering tool.”
If you trust the site,
curl | shis no worse than any other install method. If you don’t trust the site, it’s also no worse.yeah you can also just curl > cat and check the script yourself
Huh, nifty.
Do you mean
curl | cator do you really want to create a file called cat?Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.
Also, your chance of spotting something bad in a malicious script is probably quite small.
Saving it to a file is actually a decent method, since you can be sure the script you’re reviewing is the same one you’re running.
Personally I often will just manually run the install steps in order if the script is simple enough. Half the time it’s just a bunch of OS version checks followed by a tar -xf
This is my opinion on
curl | sh/bashtype directions. If the maintainers don’t provide a hash so I can confirm that is what they intended, there ain’t much I can do unless someone slapped in a function named “totallyNotMalware” into the script. I’ve looked through scripts, seen what they do, but I’m not good enough to recognize anything funky.If you just run the file you just created, it doesn’t matter that they detected a redirect. I mean it would be a bit silly to download a script, check it, and then re-download it to pipe into bash.
Downloading a two kilobyte script a second time is probably less effort than remembering to rm the script after running it, so if you don’t want to keep it, it could be better :)
Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.
Just so you know, servers cannot detect piping to any arbitrary process. The trick you’re talking about is detecting piping to an interpreter, for the lack of a better term. Piping
sleep Ntobashis observable behaviour, for example. Piping anything tocatis not.Oh, I had totally forgotten how it worked! I thought it was exactly that. Thanks for the correction
or just curl
that’s why you install from repos managed by people you trust, it’s like an app store without all the evil
This is absolutely insane
Non-deterministic, heavily corporation-influenced software issuing root shell commands in a scenario easily foreseen by attackers who can just make spam pages to poison training data? I’ll have two!
“How the fuck did Doom get installed onto my smoke alarm and not my D: drive? This is the last time I ask AI to help.”
Imagine:
- You sit on your couch.
- Rip & Tear starts playing.
- You notice a faint smell of smoke …
pant shitting intensifies
Unfortunately not the first time I’ve seen this sort of thing:
(I don’t use this project, just came across it)This will be a goldmine for malware groups that are poisoning AIs that use web search to get them to use their malware-ridden version of software and libraries, and I’m here for it with popcorn at the ready.
I kinda hope this will get more common, because the only people affected kind of deserve it, plus it’s a great way how to filter sloprojects at a glance.
This needs to be killed with fire.
The logical next step is to ask a humanoid robot to interface with your machine to perform these steps for you
your machine
Their machine
Kind of have an urge now to post an issue that the nstall skill has installed a malware on my machine.
It’s pretty plausible that could happen, and good luck debugging that.
deleted by creator
