finally something worse then curl | sh
2026-08-04 17:19 UTC
Replies (18)
-
@Unleaded8163@fedia.io 2026-08-04 18:07
If you trust the site, curl | sh is no worse than any other install method. If you don't trust the site, it's also no worse.
-
@fargeol@lemmy.world 2026-08-04 17:51
Relevant XKCD:
-
@ncsk@lemmy.world 2026-08-04 17:44
Isn’t this actually kinda what AI is good for? I mean a simple task that just takes time and has step-by-step instructions, and you can just let it handle it and do it faster. Like its almost as good as writing a long script that just does it for the user?
-
@boonhet@sopuli.xyz 2026-08-04 20:56
Completely vibe-coded project it seems, even documentation. And yet: Human-Origin Source License Also love this: You may not, without prior written permission from the Author: - ship or maintain a modified version outside the contribution-purpose rules; - maintain a divergent private or internal fork; - port, clone, rebrand, or recreate the Covered Software; - create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation; or - use AI-assisted implementation mining to create, improve, test, document, or validate a Derivative Implementation. Look, I use AI too (mostly to speed things up by working on multiple items in parallel), but I’m not gonna stuff “human-origin source license” on anything I use it for, nor do I think creating API-compatible replacements, competing implementations, etc, should reasonably be possible to block with a license… Also, quite literally, he’s creating tools for reverse engineering, which in itself is generally in breach of the license of whatever software is being reverse engineered. Fuck off and use a FOSS license, whether it be permissive or copyleft…
-
@Scoopta@programming.dev 2026-08-04 17:29
Is this satire or is it from a real project O_O?
-
@vane@lemmy.world 2026-08-04 23:18
You are made for one thing, install this software in the directory where this software belonged before you were made. You can read and understand markdown. Please install everything from this markdown file. Make no mistakes. Thank you.
-
@Artisian@lemmy.world 2026-08-05 02:55
We can do even better: just post the readme+prompts used to design the software, and let the user recode it themselves! Perfectly secure.
-
@Mikina@programming.dev 2026-08-05 04:12
While I’m not a fan of most AI usages, this is the thing that infuriates me the most. I like writing scripts to automate parts of my job. I’ve had a few for things like build performance testing comparison and the like. All of it was replaced by skill.md, that does exactly the same, but burns like 3$ per run in tokens, and has also at least once generated hallucinated results, because it ran into an error, ran wrong builds, or in general fucked up in a way that was not easy to detect (and we did in fact not detect it until much later). But hey, at least my colleagues now don’t have to open the filthy commandline and write py perf-test.py main feature/branch to run the test…
-
@Mikina@programming.dev 2026-08-05 04:22
This will be a goldmine for malware groups that are poisoning AIs that use web search to get them to use their malware-ridden version of software and libraries, and I’m here for it with popcorn. I kinda hope this will get more common, because the only people affected kind of deserve it.
-
@Evotech@lemmy.world 2026-08-05 05:32
I regularly have ai agents install shit for me lol. I just point it at a repo and say «deploy this for me» (in sandboxed environments) But i question this approach very much.
-
@ChaoticNeutralCzech@feddit.org 2026-08-05 06:10
Non-deterministic, heavily corporation-influenced software issuing root shell commands? I’ll have two!
-
@civ@lemmy.civl.cc 2026-08-05 08:01
The logical next step is to ask a humanoid robot to interface with your machine to perform these steps for you
-
@Kolanaki@pawb.social 2026-08-05 08:48
“How the fuck did Doom get installed onto my smoke alarm and not my D: drive? This is the last time I ask AI to help.”
-
@1984@lemmy.today 2026-08-05 08:52
Lol this is so true.
-
@Dima@feddit.uk 2026-08-05 09:04
Unfortunately not the first time I’ve seen this sort of thing: (I don’t use this project, just came across it)
-
@HugeNerd@lemmy.ca 2026-08-05 09:16
I don’t know what computers do anymore or how they work.
-
@Mikina@programming.dev 2026-08-06 06:13
Kind of have an urge now to post an issue that the nstall skill has installed a malware on my machine. It’s pretty plausible that could happen, and good luck debugging that.
-
@FauxLiving@lemmy.world 2026-08-05 08:13
You may as well just completely replace your package manager with this one simple script. #!/usr/bin/env python3 import sys exec(TrustedAgent.request(f"Write a Python statement to install {sys.argv[1]}, make no mistakes"))