frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

France threatens GrapheneOS with arrests / server seizure for refusing backdoors

https://mamot.fr/@LaQuadrature/115581775965025042
469•nabakin•1h ago•151 comments

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains
283•birdculture•2h ago•90 comments

Cool-retro-term: terminal emulator which mimics look and feel of the old CRTs

https://github.com/Swordfish90/cool-retro-term
28•michalpleban•1h ago•8 comments

We're (now) moving from OpenBSD to FreeBSD for firewalls

https://utcc.utoronto.ca/~cks/space/blog/sysadmin/OpenBSDToFreeBSDMove
48•zdw•5d ago•12 comments

NSA and IETF, part 3: Dodging the issues at hand

https://blog.cr.yp.to/20251123-dodging.html
249•upofadown•6h ago•117 comments

Launch HN: Karumi (YC F25) – Personalized, agentic product demos

https://www.karumi.ai/meet/start/phlz
3•tonilopezmr•15m ago•0 comments

Inside Rust's std and parking_lot mutexes – who wins?

https://blog.cuongle.dev/p/inside-rusts-std-and-parking-lot-mutexes-who-win
76•signa11•4d ago•13 comments

Chrome Jpegxl Issue Reopened

https://issues.chromium.org/issues/40168998
148•markdog12•6h ago•47 comments

Show HN: Cynthia – Reliably play MIDI music files – MIT / Portable / Windows

https://www.blaizenterprises.com/cynthia.html
67•blaiz2025•4h ago•17 comments

Corvus Robotics (YC S18): Hiring Head of Mfg/Ops, Next Door to YC Mountain View

1•robot_jackie•1h ago

Serflings is a remake of The Settlers 1

https://www.simpleguide.net/serflings.xhtml
102•doener•2d ago•33 comments

Shai-Hulud Returns: Over 300 NPM Packages Infected

https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24
632•mrdosija•8h ago•497 comments

Andrej Karpathy on X: implications of AI to schools

https://twitter.com/karpathy/status/1993010584175141038
34•bilsbie•1h ago•16 comments

We stopped roadmap work for a week and fixed bugs

https://lalitm.com/fixits-are-good-for-the-soul/
197•lalitmaganti•1d ago•269 comments

Historically Accurate Airport Dioramas by AV Pro Designs

https://www.core77.com/posts/138995/Historically-Accurate-Airport-Dioramas-by-AV-Pro-Designs
22•surprisetalk•3d ago•3 comments

Slicing Is All You Need: Towards a Universal One-Sided Distributed MatMul

https://arxiv.org/abs/2510.08874
82•matt_d•5d ago•9 comments

RuBee

https://computer.rip/2025-11-22-RuBee.html
317•Sniffnoy•15h ago•56 comments

Disney Lost Roger Rabbit

https://pluralistic.net/2025/11/18/im-not-bad/
413•leephillips•6d ago•202 comments

Japan's gamble to turn island of Hokkaido into global chip hub

https://www.bbc.com/news/articles/c8676qpxgnqo
253•1659447091•15h ago•378 comments

A New Raspberry Pi Imager

https://www.raspberrypi.com/news/a-new-raspberry-pi-imager/
31•raus22•2h ago•9 comments

µcad: New open source programming language that can generate 2D sketches and 3D

https://microcad.xyz/
359•todsacerdoti•22h ago•117 comments

Ask HN: Hearing aid wearers, what's hot?

308•pugworthy•16h ago•176 comments

I built a faster Notion in Rust

https://imedadel.com/outcrop/
131•PaulHoule•4d ago•69 comments

The Rust Performance Book (2020)

https://nnethercote.github.io/perf-book/
189•vinhnx•5d ago•30 comments

Lambda Calculus – Animated Beta Reduction of Lambda Diagrams

https://cruzgodar.com/applets/lambda-calculus
126•perryprog•13h ago•8 comments

Show HN: Virtual SLURM HPC cluster in a Docker Compose

https://github.com/exactlab/vhpc
38•ciclotrone•5d ago•6 comments

New magnetic component discovered in the Faraday effect

https://phys.org/news/2025-11-magnetic-component-faraday-effect-centuries.html
192•rbanffy•4d ago•69 comments

Mind-reading devices can now predict preconscious thoughts: is it time to worry?

https://www.nature.com/articles/d41586-025-03714-0
6•srameshc•26m ago•1 comments

GrapheneOS migrates server infrastructure from France

https://www.privacyguides.org/news/2025/11/22/grapheneos-migrates-server-infrastructure-from-fran...
4•01-_-•4m ago•0 comments

Ego, empathy, and humility at work

https://matthogg.fyi/a-unified-theory-of-ego-empathy-and-humility-at-work/
143•mrmatthogg•16h ago•47 comments
Open in hackernews

Fixrleak: Fixing Java Resource Leaks with GenAI

https://www.uber.com/blog/fixrleak-fixing-java-resource-leaks-with-genai/
17•carimura•6mo ago

Comments

stevoski•6mo ago
> “Resource leaks, where resources like files, database connections, or streams aren’t properly released after use, are a persistent issue in Java applications”

This was true maybe back in 2005. Java has had try-with-resources for a loooong time. As I see it this has been the dominant idiom for ages, for handling resources that might leak.

okr•6mo ago
People tend to forget. Stream-API is a good candidate, that people like to not consider for leakage. If you don't own your stream, if you do not definitly know, that your stream comes from a collection, then ya better close it with a try-block.
bob778•6mo ago
How much effort was spent automating this to fix 112 instances across Uber’s code base? I assume code reviews would catch any new issues so this seems like overkill for a small one-off task?
hawk_•6mo ago
Spotbugs or checkstyle etc... would catch these. What does AI add here?
xyst•6mo ago
It gives marketing team at Uber to say "wE uSe AI hErE!!1". C-levels approve since anything AI gets a nice pump.

Engineering wise. This adds nothing. It’s an absolute waste of compute and energy to run this through LLMs

sigotirandolas•6mo ago
> This analysis ensures that FixrLeak skips functions where resources are passed as parameters, returned, or stored in fields, as these resources often outlive the function’s scope.

> FixrLeak delivers precise, reliable fixes while leaving more complex cases for advanced analysis at the caller level.

In other words, this will only fix trivial leaks, which are best seen as a language design issue and can be fixed by RAII, reference counting, etc.

It won't fix the more insidious leaks like `UNBOUNDED_QUEUE.add(item)` that are more likely to pass through code review in the first place.

xyst•6mo ago
Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Peak waste.

What’s next?

"Get rid of your GitHub dependabot alerts and replace it with my shitty ChatGPT wrapper”

rvz•6mo ago
> Using AI when a static scanner like SonarQube easily picks up these types of resource leaks, especially in Java.

Exactly.

It's very disappointing to see that Uber engineers would rather trust an LLM to that claims to spot these issues when a battle-tested scanner such as SonarQube would have caught this in the first place.

The LLM hype-train is almost just as bad as the JavaScript hype train in the 2010s where some of the worst technologies are used on everything.

rvz•6mo ago
Why exactly do you need LLMs for this when efficient alternatives like SonarQube or checkstyle already do this without the expensive waste LLMs create?

This adds little to no technical advantage over existing solutions what so ever for this particular use case.

yahoozoo•6mo ago
stupid af
Traubenfuchs•6mo ago
So you tell me those 200-600k software engineers that can easily solve leetcode hard are so incompetent they missed using try-with-resources at such scale, they needed to introduce new AI tooling to fix it?

Hey Uber, I am from the EU, I usually can‘t even solve leetcode medium but I will write you scalable, spotless Java for a third of the salary.

Our industry and its economics are a joke.

hello_moto•6mo ago
So you write bug-free scalable code 100% in any jobs you ever worked for?

I guess we don’t need QA and Dev/Staging environment

rad_gruchalski•6mo ago
Can the QA team? How does the dev/staging environment help writing less buggy code?
rad_gruchalski•6mo ago
But can you leetcode heh.
TYMorningCoffee•6mo ago
A lot of commenters point out that there already are many established static checkers that do this. That is not what Uber attempts here.

Uber is not proposing a static checker. They even use sonar qube in their architecture. They propose using an LLM to resolve the leak detected by sonar qube.