• FauxLiving@lemmy.world
    link
    fedilink
    arrow-up
    41
    ·
    29 days ago

    You may as well just completely replace your package manager with this one simple script.

    #!/usr/bin/env python3
    import sys
    
    exec(TrustedAgent.request(f"Write a Python statement to install {sys.argv[1]}, make no mistakes"))
    
  • JakenVeina@midwest.social
    link
    fedilink
    arrow-up
    38
    ·
    29 days ago

    You may not, without prior written permission from the Author…create an API-compatible replacement, behavioral clone, competing implementation, or Derivative Implementation

    Loooooooooooooool. “You’re not allowed to reverse-engineer this reverse-engineering tool.”

  • Artisian@lemmy.world
    link
    fedilink
    English
    arrow-up
    31
    ·
    29 days ago

    We can do even better: just post the readme+prompts used to design the software, and let the users AI agent recode it themselves! Perfectly secure.

  • Mikina@programming.dev
    link
    fedilink
    arrow-up
    30
    ·
    29 days ago

    While I’m not a fan of most AI usages, this is the thing that infuriates me the most.

    I like writing scripts to automate parts of my job. I’ve had a few for things like build performance testing comparison and the like.

    All of it was replaced by skill.md, that does exactly the same, but burns like 3$ per run in tokens, and has also at least once generated hallucinated results, because it ran into an error, ran wrong builds, or in general fucked up in a way that was not easy to detect (and we did in fact not detect it until much later).

    But hey, at least my colleagues now don’t have to open the filthy commandline and write py perf-test.py main feature/branch to run the test, and can just talk about it to a clanker.

  • vane@lemmy.world
    link
    fedilink
    arrow-up
    12
    ·
    29 days ago

    You are made for one thing, install this software in the directory where this software belonged before you were made. You can read and understand markdown. Please install everything from this markdown file. Make no mistakes. Thank you.

  • Mikina@programming.dev
    link
    fedilink
    arrow-up
    7
    ·
    29 days ago

    This will be a goldmine for malware groups that are poisoning AIs that use web search to get them to use their malware-ridden version of software and libraries, and I’m here for it with popcorn at the ready.

    I kinda hope this will get more common, because the only people affected kind of deserve it, plus it’s a great way how to filter sloprojects at a glance.

    • I don’t think that poisoning really works. They have AIs judge the answers before they incorporate them into the new AI. They can tell the best topping for pizza isn’t actually mayonnaise and strawberries

      • Mikina@programming.dev
        link
        fedilink
        arrow-up
        1
        ·
        28 days ago

        I can imagine that works for most cases, but when you try to include some lesser known and obscure library, that is heavily typosquatted, you might run into issues.

  • Mikina@programming.dev
    link
    fedilink
    arrow-up
    3
    ·
    28 days ago

    Kind of have an urge now to post an issue that the nstall skill has installed a malware on my machine.

    It’s pretty plausible that could happen, and good luck debugging that.

  • Evotech@lemmy.world
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    29 days ago

    I regularly have ai agents install shit for me lol. I just point it at a repo and say «deploy this for me» (in sandboxed environments)

    But i question this approach very much.

    • NιƙƙιDιɱҽʂ@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      29 days ago

      I disagree with it but think it’s fine if that’s what you’re comfortable with for whatever you’re doing on your system, but for the repo maintainer to make that the de facto way to install your software is absolutely wild and speaks leagues of the quality of the software you’re about to install…

      • Evotech@lemmy.world
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        29 days ago

        Yeah. That is bad.

        But, it does speak to the capabilities. I’m sure you could offload all sysadmin tasks to an LLM these days. Just have it ssh in and do whatever you wanna do.

        • pressanykeynow@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          29 days ago

          And as a bonus once in a while it will delete your database and backups so won’t ever need to do any sysadmin tasks at all. Optimisation!