frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Fixrleak: Fixing Java Resource Leaks with GenAI

https://www.uber.com/blog/fixrleak-fixing-java-resource-leaks-with-genai/
17•carimura•1y ago

Comments

stevoski•1y ago
> “Resource leaks, where resources like files, database connections, or streams aren’t properly released after use, are a persistent issue in Java applications”

This was true maybe back in 2005. Java has had try-with-resources for a loooong time. As I see it this has been the dominant idiom for ages, for handling resources that might leak.

okr•1y ago
People tend to forget. Stream-API is a good candidate, that people like to not consider for leakage. If you don't own your stream, if you do not definitly know, that your stream comes from a collection, then ya better close it with a try-block.
bob778•1y ago
How much effort was spent automating this to fix 112 instances across Uber’s code base? I assume code reviews would catch any new issues so this seems like overkill for a small one-off task?
hawk_•1y ago
Spotbugs or checkstyle etc... would catch these. What does AI add here?
xyst•1y ago
It gives marketing team at Uber to say "wE uSe AI hErE!!1". C-levels approve since anything AI gets a nice pump.

Engineering wise. This adds nothing. It’s an absolute waste of compute and energy to run this through LLMs

sigotirandolas•1y ago
> This analysis ensures that FixrLeak skips functions where resources are passed as parameters, returned, or stored in fields, as these resources often outlive the function’s scope.

> FixrLeak delivers precise, reliable fixes while leaving more complex cases for advanced analysis at the caller level.

In other words, this will only fix trivial leaks, which are best seen as a language design issue and can be fixed by RAII, reference counting, etc.

It won't fix the more insidious leaks like `UNBOUNDED_QUEUE.add(item)` that are more likely to pass through code review in the first place.

xyst•1y ago
Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Peak waste.

What’s next?

"Get rid of your GitHub dependabot alerts and replace it with my shitty ChatGPT wrapper”

rvz•1y ago
> Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Exactly.

It's very disappointing to see that Uber engineers would rather trust an LLM to that claims to spot these issues when a battle-tested scanner such as SonarQube would have caught this in the first place.

The LLM hype-train is almost just as bad as the JavaScript hype train in the 2010s where some of the worst technologies are used on everything.

rvz•1y ago
Why exactly do you need LLMs for this when efficient alternatives like SonarQube or checkstyle already do this without the expensive waste LLMs create?

This adds little to no technical advantage over existing solutions what so ever for this particular use case.

yahoozoo•1y ago
stupid af
Traubenfuchs•1y ago
So you tell me those 200-600k software engineers that can easily solve leetcode hard are so incompetent they missed using try-with-resources at such scale, they needed to introduce new AI tooling to fix it?

Hey Uber, I am from the EU, I usually can‘t even solve leetcode medium but I will write you scalable, spotless Java for a third of the salary.

Our industry and its economics are a joke.

hello_moto•1y ago
So you write bug-free scalable code 100% in any jobs you ever worked for?

I guess we don’t need QA and Dev/Staging environment

rad_gruchalski•1y ago
Can the QA team? How does the dev/staging environment help writing less buggy code?
rad_gruchalski•1y ago
But can you leetcode heh.
TYMorningCoffee•1y ago
A lot of commenters point out that there already are many established static checkers that do this. That is not what Uber attempts here.

Uber is not proposing a static checker. They even use sonar qube in their architecture. They propose using an LLM to resolve the leak detected by sonar qube.

OpenSSL 4.1.0

https://github.com/openssl/openssl/releases/tag/openssl-4.1.0
132•petecooper•3h ago•34 comments

Local Wikipedia: Wikipedia, but only for things a half hour walk from you

https://edjefferson.com/localwiki/
849•sohkamyung•16h ago•166 comments

Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier

https://www.tvfandomlounge.com/disney-plus-price-hike-ads-premium-tier-nielsen-emmys-2026/
278•robtherobber•7h ago•258 comments

Docker is weird

https://codeandcake.dev/posts/2026-10-22-docker-is-weird
706•psxuaw•16h ago•286 comments

Remove pgrust: the entry is cheating

https://github.com/ClickHouse/ClickBench/pull/2165
143•f311a•7h ago•77 comments

eMudhra ignored Mozilla Root investigation deadline; blames social media

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
47•IcePenguin•1h ago•10 comments

Investor-owned utilities charge 23% more for electricity than public providers

https://www.kadoa.com/energy-prices/insights/investor-owned-utilities
382•hubraumhugo•2h ago•277 comments

Show HN: We had AI write a wiki from 45k Enron emails, every fact cited

https://www.thisandthat.chat/enron/
16•jreynar•3h ago•6 comments

The foolishness of "natural language programming" (1978)

https://www.cs.utexas.edu/~EWD/transcriptions/EWD06xx/EWD667.html
291•xiaoyu2006•15h ago•195 comments

The alien space of science: Coherent but cognitively unavailable directions

https://arxiv.org/abs/2603.01092
149•martincsweiss•1d ago•54 comments

Job Loss and Cortisone Mania

https://tilschuenemann.de/job-loss-cortisone-mania
81•speckx•5h ago•21 comments

Every AI model has the same "controversial" take on humans

https://www.modelcompare.ai/blog/ai-models-controversial-take-on-humans
562•rakannimer•23h ago•542 comments

Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm off-key

https://github.com/dsmurrell/onkey
129•dsmurrell•1d ago•58 comments

How does Fable 5.1 hide messages in images?

https://www.lesswrong.com/posts/WHEQps5PK8LrrcTAb/how-does-fable-5-1-hide-messages-in-images
168•gmays•18h ago•51 comments

Ask HN: If the models are so good, why doesn't OpenAI just start 100 companies?

351•ex-aws-dude•18h ago•382 comments

OpenShell – A safe, private runtime for fleets of autonomous AI agents

https://github.com/NVIDIA/OpenShell
461•niemandhier•22h ago•205 comments

Run full iOS 16.5 firmware on Android Devices

https://github.com/oosexgang/hackios-xnu-kernel
489•aghuang•1d ago•179 comments

Shitter – A Nitter Fork

https://codeberg.org/shitter/shitter
124•eustoria•2h ago•72 comments

The HTML-in-Canvas API origin trial

https://developer.chrome.com/blog/html-in-canvas-origin-trial
102•andrewstuart•20h ago•43 comments

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/
584•alphax314•1d ago•179 comments

Getting ready to operate GNU Taler in Germany

https://www.taler.net/en/news/2026-13.html
339•dewey•23h ago•155 comments

This I Believe (1952)

https://www.awakin.org/v2/read/view.php?tid=468
127•ctoth•13h ago•56 comments

Pentagon grants DHS permission to test heat ray weapon for use at border

https://www.cnn.com/2026/10/21/politics/heat-ray-weapon-dhs-pentagon
16•bushwart•1h ago•8 comments

Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

672•petecooper•1d ago•242 comments

Quad9 to exit France

https://quad9.net/news/blog/au-revoir-france/
1309•farrokhi•1d ago•453 comments

Is this the new cyber normal?

https://drew.silcock.dev/blog/is-this-the-new-cyber-normal/
121•drewsberry•4h ago•131 comments

Xbox wants you to pay 24 to 40 cents per hour to stream games you bought

https://arstechnica.com/gaming/2026/10/xbox-wants-you-to-pay-24-to-40-cents-per-hour-to-stream-ga...
361•entryleveljobsc•1d ago•323 comments

Jank – The native Clojure dialect with seamless C++ interop

https://jank-lang.org/
142•giancarlostoro•15h ago•25 comments

I reverse engineered a board game

https://wuemeli.com/blog/reversing-hitster-game/
74•wuemeli•2d ago•32 comments

LLMs are making formal software verification feasible at a much larger scale

https://www.anthropic.com/research/formal-verification
397•johnbender•17h ago•241 comments