Definitely AI generated. But the project is interesting, because that space felt a bit dry to me. netboot.xyz and iventoy are cool, but for most basic use cases I always felt these things could be yet further simplified. So I guess I'll go and review the code when I find some time.

EDIT: Found the disclosure in the repo: >I've used Claude CLI to help with some parts of this project - mostly making the web UI pretty, as I'm NOT a frontend developer. I also used it to generate the docs, but I review them manually - no automatically-generated AI code goes into the project without review from myself.

I guess that's fair.

Yep, not everyone takes AI's output, and uses it verbatim. Sometimes it feels like everyone gets painted with the same brush.

Yes, that's why I think responsible people should truthfully disclose.

Since when is disclosure a "should"? Nobody asks if you were stark-naked whilst coding it, high on drugs, having a bad day or any other arbitrary question.

Disclosure is something the author volunteered, its his freedom to do with HIS creation as he wishes.

Get off your soapbox.

Moving forward, perhaps I should state that, "I was fully clothed while preparing this PR."

I usually am not...

What a waste of good clothes. I at least vibe code in a pair raggy pair of combat shorts and an xtra-large tshirt.

There is a note on there around AI coding which gives a little more hope. But what i would expect from such a component is also a clear indication of how its security is being vetter, tested and attempted to be assured.

When using such a server, its of critical importance its secure. If someone can enter it, they can change your images, knock over a machine and get it to boot a rogue image etc.

Id be interested what thread models are taken into account. If there is any fuzzing.

Perhaps a clear list of all the third party packages it pulls in and assessment of those packages.

It sounds like a lot but actually AI can help set up a lot of tooling around this stuff to make it more managable to do a lot of thorough testing / vetting of things.

I do think its also interesting project, and ofc it might be somehting that matures over time in this regard. (i am super biassed about security also as its my domain and i've litterally seen colleagues root servers which hosted images for entire infras of companies. thats a scary vector. if you can tamper with 1 PXE boot you can overwrite firmware.

(this is not saying anything about secure boot ofc, my experiences with PXE predate that being actively deployed)

Author here - it's a freaking internal only tool, if you are exposing a PXE server to the outside world you get everything you deserve.

What you are describing can happen with any tool, iVentoy literally injects code into your images without you knowing as it's closed source. NetbootXYZ have crazy CI Pipelines and ansible to make it work.

I tried to make it as single binary, open and single shot as possible.

It's the staccato sentences

Yes, I wonder why the models do that so readily.

People's shortening attention span. Must retain.

Explanation still required, therefore statement must concisely outline product. Feature retains attention.

Simple outtro. Attention retained.

It is not a bug, it is a feature.

Yes, this observation has been expressed like a million times here.

Author here, I did disclose website + frontend + docs are AI Generated - I see this as a fairly reasonable compromise as 1 person doing this with other jobs and projects. but hey can't please everyone feel free not to use it.