frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Fixrleak: Fixing Java Resource Leaks with GenAI

https://www.uber.com/blog/fixrleak-fixing-java-resource-leaks-with-genai/
17•carimura•1y ago

Comments

stevoski•1y ago
> “Resource leaks, where resources like files, database connections, or streams aren’t properly released after use, are a persistent issue in Java applications”

This was true maybe back in 2005. Java has had try-with-resources for a loooong time. As I see it this has been the dominant idiom for ages, for handling resources that might leak.

okr•1y ago
People tend to forget. Stream-API is a good candidate, that people like to not consider for leakage. If you don't own your stream, if you do not definitly know, that your stream comes from a collection, then ya better close it with a try-block.
bob778•1y ago
How much effort was spent automating this to fix 112 instances across Uber’s code base? I assume code reviews would catch any new issues so this seems like overkill for a small one-off task?
hawk_•1y ago
Spotbugs or checkstyle etc... would catch these. What does AI add here?
xyst•1y ago
It gives marketing team at Uber to say "wE uSe AI hErE!!1". C-levels approve since anything AI gets a nice pump.

Engineering wise. This adds nothing. It’s an absolute waste of compute and energy to run this through LLMs

sigotirandolas•1y ago
> This analysis ensures that FixrLeak skips functions where resources are passed as parameters, returned, or stored in fields, as these resources often outlive the function’s scope.

> FixrLeak delivers precise, reliable fixes while leaving more complex cases for advanced analysis at the caller level.

In other words, this will only fix trivial leaks, which are best seen as a language design issue and can be fixed by RAII, reference counting, etc.

It won't fix the more insidious leaks like `UNBOUNDED_QUEUE.add(item)` that are more likely to pass through code review in the first place.

xyst•1y ago
Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Peak waste.

What’s next?

"Get rid of your GitHub dependabot alerts and replace it with my shitty ChatGPT wrapper”

rvz•1y ago
> Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Exactly.

It's very disappointing to see that Uber engineers would rather trust an LLM to that claims to spot these issues when a battle-tested scanner such as SonarQube would have caught this in the first place.

The LLM hype-train is almost just as bad as the JavaScript hype train in the 2010s where some of the worst technologies are used on everything.

rvz•1y ago
Why exactly do you need LLMs for this when efficient alternatives like SonarQube or checkstyle already do this without the expensive waste LLMs create?

This adds little to no technical advantage over existing solutions what so ever for this particular use case.

yahoozoo•1y ago
stupid af
Traubenfuchs•1y ago
So you tell me those 200-600k software engineers that can easily solve leetcode hard are so incompetent they missed using try-with-resources at such scale, they needed to introduce new AI tooling to fix it?

Hey Uber, I am from the EU, I usually can‘t even solve leetcode medium but I will write you scalable, spotless Java for a third of the salary.

Our industry and its economics are a joke.

hello_moto•1y ago
So you write bug-free scalable code 100% in any jobs you ever worked for?

I guess we don’t need QA and Dev/Staging environment

rad_gruchalski•1y ago
Can the QA team? How does the dev/staging environment help writing less buggy code?
rad_gruchalski•1y ago
But can you leetcode heh.
TYMorningCoffee•1y ago
A lot of commenters point out that there already are many established static checkers that do this. That is not what Uber attempts here.

Uber is not proposing a static checker. They even use sonar qube in their architecture. They propose using an LLM to resolve the leak detected by sonar qube.

Lovable apps expose passport details and more than 200K private messages

https://www.crissyfield.de/research/lovable-en/
402•armcat•3h ago•134 comments

PyPI's redesigned project pages with clearer security signals are now live

https://blog.pypi.org/posts/2026-11-06-ui-updates-complete/
161•rbanffy•5h ago•64 comments

A Family Tree of Software Job Titles

https://zwischenzugs.com/2026/11/03/a-family-tree-of-software-job-titles/
95•umerf•3h ago•38 comments

KDE: The documentary [video]

https://tube.kockatoo.org/w/fFinNHfanLT7aBEb2B8y4c
299•mrkn1•7h ago•63 comments

Why get an expensive Pi when I have an old phone?

https://so.long.thanks.fish/why-pi-when-i-have-an-old-phone/
452•casi•4d ago•263 comments

Seagate's new hybrid drive raises some old questions

https://arstechnica.com/gadgets/2026/11/seagate-resurrects-the-ssd-hdd-hybrid-drive/
33•PaulHoule•3d ago•13 comments

Advancing science and engineering with Antigravity's /teamwork

https://research.google/blog/advancing-science-engineering-with-antigravitys-teamwork-feature/
126•acossta•7h ago•31 comments

LinkedIn, Monster take down over 1000 fake job postings after CBC investigation

https://www.cbc.ca/news/canada/linkedin-monster-take-down-over-1-000-fake-job-postings-after-cbc-...
90•gnabgib•2h ago•29 comments

Show HN: DeepSeek V3 in ~200 lines of pure Jax

https://github.com/Vaibhaav-Tiwari/deepseek-v3-jax
99•VaibhaavTiwari•5h ago•6 comments

'Grey Rocking': The Life-Improving Power of Being Really, Really Boring (2021)

https://www.esquire.com/uk/life/a38473153/grey-rock-technique-being-boring/
20•NaOH•2d ago•3 comments

Reverse engineering a vintage diode-transistor logic chip

https://www.righto.com/2026/11/signetics-st680a-dtl-nand.html
61•dverlaeckt80•6d ago•2 comments

Generative AI uses more energy on non-English text

https://news.umich.edu/generative-ai-uses-more-energy-on-non-english-text/
145•DeepLogin•4d ago•87 comments

Will we put data centers in space?

https://www.forethought.org/research/will-we-really-put-data-centers-in-space
24•simonebrunozzi•3h ago•60 comments

Show HN: A terminal-native idle factory game, written in Rust with ratatui

https://gitlab.com/snipedbywifi/terminactory
112•snipedbywifi•6h ago•24 comments

Monkey Island: all 13 versions side by side

https://monkeyisland.pages.dev/
422•maximilianburke•16h ago•139 comments

Demystifying phone unlocking tools: A technical overview

https://osservatorionessuno.org/blog/2026/05/demystifying-phone-unlocking-tools-a-technical-overv...
36•iloveyoutwo•6h ago•0 comments

Show HN: Fursoy – Out-of-order RV64IMAFDV core in SystemVerilog (Linux 6.6)

https://github.com/FURSOY/fursoy-cpu
54•fursoy•6h ago•16 comments

Tech Companies Are Trying to Shift the Concept of Privacy (Again)

https://www.eff.org/deeplinks/2026/11/tech-companies-are-trying-shift-entire-concept-privacy-again
358•gslin•8h ago•144 comments

Italy fines Meta $887M over Android users' data access

https://www.reuters.com/world/italy-fines-meta-887-million-over-android-users-data-access-2026-11...
256•giuliomagnifico•7h ago•163 comments

Testing a Trash Can Faraday Cage

https://www.jefftk.com/p/testing-a-trash-can-faraday-cage
55•torutofu•2d ago•38 comments

US IRS free online tax filing open source repo (2025)

https://github.com/IRS-Public/direct-file
106•accountinhn•3h ago•47 comments

Let's Write a PostScript Interpreter

https://beyondloom.com/blog/postscript.html
91•RebelPotato•1d ago•14 comments

A visual explanation of reinforcement learning

https://aatishb.com/myriad/how-brains-learn/
84•aatish•7h ago•6 comments

How to Create Your Own Decentralized Messenger Protocol

https://karboosx.net/post/5j7jdDM3/how-to-create-your-own-decentralized-messenger-protocol
35•fagnerbrack•5h ago•7 comments

Dartmouth (Guarini) will not admit math PhD cohort this year

https://www.thedartmouth.com/article/2026/11/gandhi-fagell-guarini-will-not-admit-math-ph-d-cohor...
19•sebg•1h ago•0 comments

Project Zero will disclose vulnerabilities 90 days after reporting

https://projectzero.google/2026/11/disclosure-policy.html
69•hacb•9h ago•9 comments

Creating a self booting ZIP archive

https://goliath32.com/blog/ziphead.html
23•gdgghhhhh•4h ago•4 comments

Formalizing US Tax Code (Using Lean)

https://lexifina.com/blog/formalizing-the-us-tax-code
115•dnw•5h ago•76 comments

C3 0.8.6:Library fetching,30% smaller safe-mode binaries,and stricter type rules

https://c3-lang.org/blog/c3_0_8_6_fetching_libraries/
34•DASD•2d ago•1 comments

Serving GLM-5.3 at 607.8 tok/s across two Nvidia DGX stations with vLLM

https://developer.nvidia.com/blog/when-one-gpu-isnt-enough-serving-glm-5-3-across-two-nvidia-dgx-...
121•wondersky•6h ago•63 comments