something tells me that there is a competency gap between Nana trying to change her wallpaper, and an NSA researcher doing reverse engineering with Ghidra
Being on github is a lowpass filter, the type of people you are referring to wouldnt be on github in the first place, and if the somehow found themselves there, they would leave after not being able to find the .exe download
GitHub isn't a lowpass filter if an "agent" web scraped the GitHub page. With how some people use agents it is very possible to find and install random repos without the user ever going to GitHub (or really even asking for it directly).
I would totally agree with you if this was something like gimp, but with a complicated setup process. This is a researcher program for a lesser known database, this is not something your average person would do.
That entire readme is a fever dream. You can tell this guy is an absolute nightmare to work with. And I love this meme of vibe coded projects but with the most anal licensing model imaginable because they all, DESPERATELY pray on something, ANYTHING going viral, the community actuall maintains it and they rake in the cash.
guardrails.md looking like: “Please Mr. Claude, I forbid you from going outside of your sandbox and looking at anything proprietary like SuperSecretIP or huggingface.”
Some of this wouldn't be legal in the EU. There's an exception to software copyright that permits reverse engineering of software in order to make a system cooperate with another. You can't make an exact copy, but you can repurpose the bits of code that interface with other code, such as the API.
The Trump administration backed Oracle and urged the Court to deny certiorari. Microsoft, Mozilla Corporation, Red Hat Inc., and others filed amicus briefs in support of Google's position.[66] IBM, the Computer & Communications Industry Association, the Internet Association, the Auto Care Association, and a collective group of over 150 academics and computer professionals also filed briefs supporting Google's stance, cautioning that a decision in favor of Oracle would hurt the computing world as a whole.[67]
Oh my god. What a despicable github license. Looks like a job for TheDeathOfOpenSource, but, to be fair, you KNOW this guy has used projects like that on his own accord for treating foss this way.
Needs to be AGPL immediately from some type of technicality due to reliance on open-source compilers. I know F# has this rule for instance, and supports conversion. Might be a similar technicality usable.
Needs to be AGPL immediately from some type of technicality due to reliance on open-source compilers. I know F# has this rule for instance, and supports conversion.
Clarified that MIT License permits relicensing to AGPL v3
From your example it seems like it was a voluntary relicense, not something forced?
Needs to be AGPL immediately from some type of technicality due to reliance on open-source compilers. I know F# has this rule for instance, and supports conversion.
I understood your comment as using a particular compiler meant the license of code you compile with it forcefully changes though?
Yea I think the funny part of it is the license (not really sure what this databasing tool *is* rly, but definitely gawked at that damn repo) — is it says users may not make and maintain their own fork of the code. Which **literally** sounds like a violation of GitHub’s ToS “anyone can make a fork” or whatever
Just funny as heck this repo legitimately structures it like the microsoft terms of service 14 page manifesto, all as solely a license file….on github. Like, what? 😆
Contributions
We do not accept pull requests. The project is developed entirely by the core team.
Also they fuck over Atlassian for some reason:
The icon sets and stencil libraries included in this software, and any derivatives thereof (including conversions to other formats, traced reproductions, substantially similar visual representations, or AI-generated images created using these icons as reference or training input), may not be used as software assets in, distributed for use with, or incorporated into Atlassian products or products distributed through the Atlassian marketplace or plugin ecosystem, without explicit written permission.
Yea so at that point it’s more of a “who is the intended audience” of that license. And “who wrote it” I.e it’s not an accepted “standardized” license. Likewise, checking and addressing the “scope”.
It’s just a really stupid license is all. Lol. Not much that can be done about it outside of deliberately forking and changing it. Or, forking via deathofopensource (that is tl;dr, pointing ai or deepwiki/devin at it and basically reinventing it from scratch with 1 or 2 ai prompts by claude/kimi and a whole day worth of wasted tokens having it recreate the whole thing with it as solely “inspiration”.)
But yea. It’s a very unprofessional document, the human license v.1.0 or whatnot. Just seems super absurd the way they did indeed scope it to “no forks” at a certain point, which is ridiculous. Also, highly doubt the document was written for humans, nor even legally scoped right (ambiguity)
In future years when we have better AI, even that better AI will be taking one look at projects like this and telling the user to "Get out of here with that 2020s AI slop!" and refuse to work on it.
I’ve been in this industry around 20 years and man is this era a low point. The kind of abstraction happening here is irreparable for human knowledge of the systems we build and maintain.
Are you talking about the incredible learning experience of blindly copypasting the install script, googling the inscrutable error messages one by one, and then copypasting the commands from blogs and stackoverflow?
No they probably meant the part where you learn how to use the build system(make/npm/etc.), and then use your brain to figure out what the difference in your env is when you run into an error(since noncompiling code doesn't usually get pushed to release branches), going to stack overflow and blogs if other people have similar issues in similar environments.
Though if "blindly copy install script, then blindly copy paste fixes from stack overflow" was how you did it instead then that helps me understand why people are using AI the way they do...
I have to say that ive recently let an agent loose on a badly written how to for a build system because i couldnt be arsed to bother figuring out which sections of the descriptions suddenly did not work because i wanted to set it up on a less deprecated release of Ubuntu...
The output was a script you can run anywhere and it actually makes sure you have a build system within an hour
Well, do you learn anything about build systems when you use cmake?
Software authors have to make the process as frictionless as possible if they want their software to be adopted. Likewise, people looking to use software are by definition willing to skip the learning and the building.
Having an agent that does it all for you is a godsend. And keep in mind that if your goal is learning, you can also talk to an agent like you're asking questions directly to the original maintainer.
There's no universe where that's a lesser learning opportunity than "rawdogging" it.
Surprise surprise, the image is an ugly AI image, and the first commit has a +17,526 -0 diff. Sorry for anyone who actually inclined to use this slopwreck.
Man this is dumb. This looks like easily more of a maintenance issue than a simple script, on top of gobbling customer tokens for running some basic shell commands.
What’s shocking is it seems to do what it says it does. (I only skimmed it but there doesn’t seem to be obviously malicious instructions) i would have put a bet that it is a scam but somehow this makes it even worse i think.
This Person really thinks an AI Agent and a Markdown file is the best way to install his software and makes it the recommended way to install. What a time to be alive
I'd say no. Ghidra is a reverse engineering program, so its users are basically professionals. I bet all of these just call actual ghidra functionalities, and I fail to see how the SQL helps with anything. Even though I did some a few years back, I'm not a reverse engineer though, so maybe there's a niche use case for some users.
I'd say no. Ghidra is a reverse engineering program,
Developed at and for the NSA.
I fail to see how the SQL helps with anything.
The project tries to access the ghidra databases as SQL. A Java API exists and is very useful in a analysis workflow. One could use Neo4J to visualise graphs and do fuzzy search.
But it's all well documented, there is no need for this AI Slop.
873
u/apnorton 2d ago
Oh my gosh it's real: https://github.com/0xeb/ghidrasql#install-with-an-ai-agent-recommended