Users are blameless, I find the fault with the developers.

Asking users to pipe curl to bash because it’s easier for the developer is just the developer being lazy, IMO.

Developers wouldn’t get a free pass for taking lazy, insecure shortcuts in programming, I don’t know why they should get a free pass on this.

The post is specifically about how you can serve a totally different script than the one you inspect. If you use curl to fetch the script via terminal, the webserver can send a different script to a browser based on the UserAgent.

And whether or not you think someone would be mad to do it, it’s still a widespread practice. The article mentions that piping curl straight to bash is already standard procedure for Proxmox helper scripts. But don’t take anyone’s word for it, check it out:

https://community-scripts.github.io/ProxmoxVE/

It’s also the recommended method for PiHole:

https://docs.pi-hole.net/main/basic-install/

And don’t forget it’s hard-coded to inject affiliate links on certain sites.

Oh, wait, I forgot they said that was an “accident”.

Fire up Wireshark on a different machine and transfer a file between two other machines, you won’t see anything.

This is true, but only because we’ve replaced Ethernet hubs with switches.

An Ethernet hub was a dumber, cheaper device that imitated a switch, but with a fundamental difference: all connected devices were in the same collision domain.

I don’t know too much about WiFi but it probably does the same, it’s just a bridge to the same network.

Wireless communication has the same problem as Ethernet hubs, with no real solution like a switch though. Any wireless transmission involves an antenna, and transmitting is similar to standing in your yard with a bull horn to talk to your buddy two houses down. Anyone with an antenna can receive the wireless signal you send out. Period.

So some really smart people found ways to keep the stuff you send private, but anyone can sit nearby and capture data going through the air, it’s just not anything you can use because of the encryption.

Firewall redirect and masquerade.

Bitch you thought

It’s easy to post on a forum and say so.

Maybe you even are actually asking AI questions and researching whether or not it’s accurate.

Perhaps you really are the world’s most perfect person.

But even if that’s true, which I very seriously doubt, then you’re going to be the extreme minority. People will ask AI a question, and if they like the answers given, they’ll look no further. If they don’t like the answers given, they’ll ask the AI with different wording until they get the answer they want.

It’s a single data data point, nothing more, nothing less. But that single data point is evidence of using LLMs in their code generation.

Time will tell if this is a molehill or a mountain. When it comes to data privacy, given that it just takes one mistake and my data can be compromised, I’m going to be picky about who I park my data with.

I’m not necessarily immediately looking to jump ship, but I consider it a red flag that they’re using developer tools centered around using AI to generate code.

There it is. The bold-faced lie.

“I don’t blindly trust AI, I just ask it to summarize something, read the output, then read the source article too. Just to be sure the AI summarized it properly.”

Nobody is doing double the work. If you ask AI a question, it only gets a vibe check at best.

If you want to trade accuracy for speed, that’s your prerogative.

AI has its uses. Transcribing subtitles, searching images by description, things like that. But too many times, I’ve seen AI summaries that, if you read the article the AI cited, it can be flatly wrong on things.

What’s the point of a summary that doesn’t actually summarize the facts accurately?

Sure, but with all the mistakes I see LLMs making in places where professionals should be quality checking their work (lawyers, judges, internal company email summaries, etc) it gives me pause considering this is a privacy and security focused company.

It’s one thing for AI to hallucinate cases, and another entirely to forget there’s a difference between = and == when the AI bulk generates code. One slip up and my security and privacy could be compromised.

You’re welcome to buy in to the AI hype. I remember the dot com bubble.

There’s been evidence in their github repo that they’re using LLMs to code their tools now.

It’s making me reconsider using them.

It’s the constant war on end users that chased me away from windows.

You can’t say no to their relentless advertising. It’s “maybe later”. The pushing to require a Microsoft account. Ads in the start menu. Windows Recall.

The list goes on. You get as much agency as Microsoft allows, or you violate your eula and modify the os to remove things you don’t want.

We didn’t know it at the time, but windows 7 was peak windows.

What I want is a way to answer the phone like a fax machine. Just press a button and the call gets answered and immediately starts playing that fax machine sound.

I’ll bet that would stop calls. Surely they have something that can tell if they’re calling a fax machine over and over.

It’s not weed, it’s that mint is very aggressive in spreading.

I personally like the mint growing in the yard it makes mowing the lawn smell great.