frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
762•jamesberthoty•11h ago•599 comments

How to make the Framework Desktop run even quieter

https://noctua.at/en/how-to-make-the-framework-desktop-run-even-quieter
143•lwhsiao•4h ago•26 comments

Things you can do with a Software Defined Radio (2024)

https://blinry.org/50-things-with-sdr/
521•mihau•8h ago•100 comments

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out

https://www.gavi.org/vaccineswork/denmark-close-wiping-out-leading-cancer-causing-hpv-strains-aft...
364•slu•4h ago•143 comments

Waymo has received our pilot permit allowing for commercial operations at SFO

https://waymo.com/blog/#short-all-systems-go-at-sfo-waymo-has-received-our-pilot-permit
498•ChrisArchitect•6h ago•471 comments

A dumb introduction to z3

https://asibahi.github.io/thoughts/a-gentle-introduction-to-z3/
53•kfl•1d ago•6 comments

Should We Drain the Everglades?

https://rabbitcavern.substack.com/p/should-we-drain-the-everglades
47•ksymph•3h ago•27 comments

How Container Filesystem Works: Building a Docker-Like Container from Scratch

https://labs.iximiuz.com/tutorials/container-filesystem-from-scratch
73•lgunsch•3d ago•14 comments

I built my own phone because innovation is sad rn [video]

https://www.youtube.com/watch?v=qy_9w_c2ub0
129•Timothee•1d ago•28 comments

Wind turbine blade transportation challenges

https://spectrum.ieee.org/wind-turbine-blade-transport-plane
64•Brajeshwar•3d ago•76 comments

Launch HN: Rowboat (YC S24) – Open-source IDE for multi-agent systems

https://github.com/rowboatlabs/rowboat
40•segmenta•5h ago•22 comments

A new experimental Google app for Windows

https://blog.google/products/search/google-app-windows-labs/
107•meetpateltech•7h ago•150 comments

The "Most Hated" CSS Feature: Cos() and Sin()

https://css-tricks.com/the-most-hated-css-feature-cos-and-sin/
21•rapawel•2h ago•4 comments

Scammed out of $130K via fake Google call, spoofed Google email and auth sync

https://bewildered.substack.com/p/i-was-scammed-out-of-130000-and-google
226•davidscoville•5h ago•401 comments

Plugin System

https://iina.io/plugins/
121•xnhbx•6h ago•31 comments

Top UN legal investigators conclude Israel is guilty of genocide in Gaza

https://www.middleeasteye.net/news/un-concludes-israel-guilty-genocide-gaza
494•Qem•14h ago•298 comments

When the job search becomes impossible

https://www.jeffwofford.com/wp/?p=2240
121•pertinhower•9h ago•132 comments

PA-RISC Performance and History

https://www.openpa.net/pa-risc_processor_history.html
18•naves•3d ago•2 comments

The Linux Process Journey (2023) [pdf]

https://thelearningjourneyebooks.com/wp-content/uploads/2023/09/TheLinuxProcessJourney_v6_Sep2023...
42•maxmoehl•4h ago•1 comments

SQL performance improvements: finding the right queries to fix

https://ohdear.app/news-and-updates/sql-performance-improvements-finding-the-right-queries-to-fix...
8•freekmurze•2h ago•0 comments

UTF-8 history (2003)

https://doc.cat-v.org/bell_labs/utf-8_history
82•mikecarlton•3d ago•31 comments

Writing an operating system kernel from scratch – RISC-V/OpenSBI/Zig

https://popovicu.com/posts/writing-an-operating-system-kernel-from-scratch/
77•popovicu•2d ago•3 comments

CIA Freedom of Information Act Electronic Reading Room

https://www.cia.gov/readingroom
140•bookofjoe•9h ago•32 comments

Bertrand Russell to Oswald Mosley (1962)

https://lettersofnote.com/2016/02/02/every-ounce-of-my-energy/
161•giraffe_lady•6h ago•78 comments

Implicit ODE solvers are not universally more robust than explicit ODE solvers

https://www.stochasticlifestyle.com/implicit-ode-solvers-are-not-universally-more-robust-than-exp...
91•cbolton•9h ago•28 comments

Paper Folding Assembly Line [video]

https://www.youtube.com/watch?v=XhUuhl9iWpQ
51•peteforde•1w ago•8 comments

Development of the MOS Technology 6502: A Historical Perspective (2022)

https://www.EmbeddedRelated.com/showarticle/1453.php
51•jason_s•7h ago•8 comments

Soviet Maps (2021)

https://twitter.com/LindyScience/status/1413532678318612482
21•georgecmu•3d ago•4 comments

60 years after Gemini, newly processed images reveal details

https://arstechnica.com/space/2025/09/60-years-after-gemini-newly-processed-images-reveal-incredi...
248•sohkamyung•3d ago•69 comments

Generative AI as Seniority-Biased Technological Change

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5425555
199•zeuch•9h ago•168 comments
Open in hackernews

Fixrleak: Fixing Java Resource Leaks with GenAI

https://www.uber.com/blog/fixrleak-fixing-java-resource-leaks-with-genai/
17•carimura•4mo ago

Comments

stevoski•4mo ago
> “Resource leaks, where resources like files, database connections, or streams aren’t properly released after use, are a persistent issue in Java applications”

This was true maybe back in 2005. Java has had try-with-resources for a loooong time. As I see it this has been the dominant idiom for ages, for handling resources that might leak.

okr•4mo ago
People tend to forget. Stream-API is a good candidate, that people like to not consider for leakage. If you don't own your stream, if you do not definitly know, that your stream comes from a collection, then ya better close it with a try-block.
bob778•4mo ago
How much effort was spent automating this to fix 112 instances across Uber’s code base? I assume code reviews would catch any new issues so this seems like overkill for a small one-off task?
hawk_•4mo ago
Spotbugs or checkstyle etc... would catch these. What does AI add here?
xyst•4mo ago
It gives marketing team at Uber to say "wE uSe AI hErE!!1". C-levels approve since anything AI gets a nice pump.

Engineering wise. This adds nothing. It’s an absolute waste of compute and energy to run this through LLMs

sigotirandolas•4mo ago
> This analysis ensures that FixrLeak skips functions where resources are passed as parameters, returned, or stored in fields, as these resources often outlive the function’s scope.

> FixrLeak delivers precise, reliable fixes while leaving more complex cases for advanced analysis at the caller level.

In other words, this will only fix trivial leaks, which are best seen as a language design issue and can be fixed by RAII, reference counting, etc.

It won't fix the more insidious leaks like `UNBOUNDED_QUEUE.add(item)` that are more likely to pass through code review in the first place.

xyst•4mo ago
Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Peak waste.

What’s next?

"Get rid of your GitHub dependabot alerts and replace it with my shitty ChatGPT wrapper”

rvz•4mo ago
> Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Exactly.

It's very disappointing to see that Uber engineers would rather trust an LLM to that claims to spot these issues when a battle-tested scanner such as SonarQube would have caught this in the first place.

The LLM hype-train is almost just as bad as the JavaScript hype train in the 2010s where some of the worst technologies are used on everything.

rvz•4mo ago
Why exactly do you need LLMs for this when efficient alternatives like SonarQube or checkstyle already do this without the expensive waste LLMs create?

This adds little to no technical advantage over existing solutions what so ever for this particular use case.

yahoozoo•4mo ago
stupid af
Traubenfuchs•4mo ago
So you tell me those 200-600k software engineers that can easily solve leetcode hard are so incompetent they missed using try-with-resources at such scale, they needed to introduce new AI tooling to fix it?

Hey Uber, I am from the EU, I usually can‘t even solve leetcode medium but I will write you scalable, spotless Java for a third of the salary.

Our industry and its economics are a joke.

hello_moto•4mo ago
So you write bug-free scalable code 100% in any jobs you ever worked for?

I guess we don’t need QA and Dev/Staging environment

rad_gruchalski•4mo ago
Can the QA team? How does the dev/staging environment help writing less buggy code?
rad_gruchalski•4mo ago
But can you leetcode heh.
TYMorningCoffee•4mo ago
A lot of commenters point out that there already are many established static checkers that do this. That is not what Uber attempts here.

Uber is not proposing a static checker. They even use sonar qube in their architecture. They propose using an LLM to resolve the leak detected by sonar qube.