AX·NEWS
Sign in

Software Engineering

Software Engineering news — Wednesday 21 October 2026

132 stories from 5 sources, every one in English. Each links to its publisher.

Open in the live feedRSS feedOn a TV

  1. Understanding Nix flakes
    USlobste.rs

    Comments

  2. mitmproxy adds --emudhra option
    USHacker News Front Page

    Article URL: https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b Comments URL: https://news.ycombinator.com/item?id=50189232 Points: 540 # Comments: 131

  3. There isn't an easy exploit for this PHP vulnerability
    USHacker News Front Page

    Article URL: https://eliastaylor.com/noexploit/ Comments URL: https://news.ycombinator.com/item?id=50188948 Points: 532 # Comments: 322

  4. Railway Security Disclosure: Wednesday October 21st
    USlobste.rs

    Comments

  5. Railway Security Disclosure
    USHacker News Front Page

    Article URL: https://blog.railway.com/p/security-disclosure-wednesday-october-21st Comments URL: https://news.ycombinator.com/item?id=50188228 Points: 569 # Comments: 329

  6. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
    USlobste.rs

    Comments

  7. Embedding EYG in Erlang programs
    USlobste.rs

    Comments

  8. PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
    USHacker News Front Page

    Article URL: https://aws.amazon.com/security/security-bulletins/2026-143-aws/ Comments URL: https://news.ycombinator.com/item?id=50187708 Points: 107 # Comments: 26

  9. How to Run Turing-Complete Malware in PyTorch's Backward Pass
    USlobste.rs

    Comments

  10. GitLab Critical Patch Release
    USlobste.rs

    Comments

  11. Physicists trap a single antimatter particle for a month
    USHacker News Front Page

    Article URL: https://www.scientificamerican.com/article/physicists-trap-a-single-antimatter-particle-for-a-month/ Comments URL: https://news.ycombinator.com/item?id=50186450 Points: 331 # Comments: 99

  12. Meta hit with $25B penalty for deceiving users about privacy on Facebook
    USHacker News Front Page

    Article URL: https://nmdoj.gov/press-release/the-new-mexico-department-of-justice-secures-another-landmark-victory-against-big-tech-with-historic-25-billion-penalty-against-facebook/ Comments URL…

  13. Mistral Large 4
    USHacker News Front Page

    Article URL: https://docs.mistral.ai/models/mistral-large-4-0 Comments URL: https://news.ycombinator.com/item?id=50186129 Points: 289 # Comments: 76

  14. Claude Duet
    USHacker News Front Page

    Article URL: https://claude.com/product/claude-duet Comments URL: https://news.ycombinator.com/item?id=50186037 Points: 529 # Comments: 489

  15. Google's Rust Style Guide
    USlobste.rs

    Comments

  16. Google's Rust Style Guide
    USHacker News Front Page

    Article URL: https://google.github.io/styleguide/rustguide.html Comments URL: https://news.ycombinator.com/item?id=50186010 Points: 348 # Comments: 207

  17. GitLab Remote Code Execution - Integer Overflow issue
    USHacker News Front Page

    Article URL: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ Comments URL: https://news.ycombinator.com/item?id=50185869 Points: 395 # Comments: 90

  18. Flow Typing, A New Lens on Linearity
    USlobste.rs

    Comments

  19. Canary Tokens
    USHacker News Front Page

    https://docs.canarytokens.org/guide/ Comments URL: https://news.ycombinator.com/item?id=50185630 Points: 118 # Comments: 21

  20. Amazon's "digital pacifier" for toddlers
    USHacker News Front Page

    Article URL: https://oligarchwatch.substack.com/p/amazons-digital-pacifier-for-toddlers Comments URL: https://news.ycombinator.com/item?id=50185534 Points: 235 # Comments: 341

  21. Passkeys Attestation Trap
    USlobste.rs

    Comments

  22. Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
    USHacker News Front Page

    https://nmdoj.gov/press-release/the-new-mexico-department-of... Comments URL: https://news.ycombinator.com/item?id=50184820 Points: 624 # Comments: 360

  23. CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes
    USlobste.rs

    Comments

  24. EA is shutting down BioWare
    USHacker News Front Page

    Article URL: https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware Comments URL: https://news.ycombinator.com/item?id=50184586 Points: 576 # Comments: 348

  25. Don't throw it all away: Caching an immediate-mode UI
    USlobste.rs

    Comments

  26. BazelCon 2026 recap
    USlobste.rs

    Comments

  27. Building Immersive Virtual Economies: An Introduction to KursarScript (KSPL)
    USStack Overflow Blog
  28. New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic
    USHacker News Front Page

    Article URL: https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulnerable-coral-reefs Comments URL: https://news.ycombinator.com/item?id=50183512 Points: 100 # Comments: 37

  29. Your AI agent fixed the bug, but what else did it change?
    USlobste.rs

    Comments

  30. Node.js — Wednesday, October 21, 2026 Security Releases
    USlobste.rs

    Comments

  31. Today's PHP Security Release, and How We're Strengthening PHP Security
    USHacker News Front Page

    Related ongoing thread: PHP 8.2.35 - https://news.ycombinator.com/item?id=50180873 (links to more at https://news.ycombinator.com/item?id=50184935 ) Comments URL: https://news.ycombinator.com/item?id=50182987 Points: 741 # Comments: 367

  32. Firefox Local Mode
    USlobste.rs

    Comments

  33. zls 0.17.0
    USlobste.rs

    Comments

  34. Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin
    USHacker News Front Page

    Article URL: https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488 Comments URL: https://news.ycombinator.com/item?id=50182526 Points: 187 # Comments: 96

  35. Rechenwerk — a programmer’s calculator for hex, binary and RPN for iOS and Android
    USlobste.rs

    Comments

  36. php2shell by Calif Research
    USlobste.rs

    Comments

  37. Patch the Planet: global response coordination as agents uncover vulnerabilities
    USHacker News Front Page

    https://patchtheplanet.org/ Comments URL: https://news.ycombinator.com/item?id=50181175 Points: 250 # Comments: 167

  38. The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck
    USHacker News Front Page

    Article URL: https://www.techdirt.com/2026/10/20/accident-or-not-the-no-kings-takedown-is-why-you-shouldnt-rent-your-megaphone-from-zuck/ Comments URL: https://news.ycombinator.com/item?id=50181137 Points: 412 # Comments: 343

  39. DuckDB 2.0.0 LTS "Cinnamon Teal"
    USHacker News Front Page

    Article URL: https://duckdb.org/2026/10/21/announcing-duckdb-200 Comments URL: https://news.ycombinator.com/item?id=50181136 Points: 439 # Comments: 59

  40. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
    USHacker News Front Page

    Article URL: https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/ Comments URL: https://news.ycombinator.com/item?id=50181114 Points: 581 # Comments: 188

  41. Survey Says: You'll swap the model, but everything you build around it is staying put
    USStack Overflow Blog

    Earlier this month, my team at Stacklok surveyed 520 technical leaders to understand whether they were concerned about being locked into frontier labs. The data says they’re already swapping models in and out, but the trap they’re…

  42. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
    USlobste.rs

    Comments

  43. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out
    USHacker News Front Page

    Article URL: https://www.php.net/index.php Comments URL: https://news.ycombinator.com/item?id=50180943 Points: 188 # Comments: 48

  44. Updated PHP version released to GitHub
    USHacker News Front Page

    Related ongoing thread: Today's PHP security release, and how we're strengthening security - https://news.ycombinator.com/item?id=50182987 Comments URL: https://news.ycombinator.com/item?id=50180873 Points: 1033 # Comments: 547

  45. PHP2Shell: AI uncovers critical RCE in PHP
    USHacker News Front Page

    https://www.php2shell.com/ Comments URL: https://news.ycombinator.com/item?id=50180836 Points: 382 # Comments: 139

  46. Using thousands of AI agents to uncover new leads in biological data
    USHacker News Front Page

    Article URL: https://openai.com/index/scaling-ai-research-for-complex-biological-data/ Comments URL: https://news.ycombinator.com/item?id=50180752 Points: 134 # Comments: 84

  47. Most advice is right for the person giving it
    USHacker News Front Page

    Article URL: https://coached.com/essays/most-advice-is-right-for-the-person-giving-it/ Comments URL: https://news.ycombinator.com/item?id=50180444 Points: 119 # Comments: 93

  48. cargo-manifesto: Your [Rust] project needs a manifesto
    USlobste.rs

    Comments

  49. OpenAI models are coming to Google Cloud
    USHacker News Front Page

    Article URL: https://openai.com/index/openai-models-google-cloud/ Comments URL: https://news.ycombinator.com/item?id=50180079 Points: 309 # Comments: 132

  50. Dutch National Cyber Security Center is Offline because it uses PHP
    USHacker News Front Page

    Article URL: https://www.ncsc.nl/actueel Comments URL: https://news.ycombinator.com/item?id=50179828 Points: 238 # Comments: 79

  51. Qwen3-Coder writes less secure code when told it's for a US persona
    USHacker News Front Page

    Article URL: https://www.hirundo.io/blog/qwen3-coder-vulnerabilities Comments URL: https://news.ycombinator.com/item?id=50179706 Points: 216 # Comments: 108

  52. Deleting 19k Lines of Dead Compiler Code Without Trusting the LLM
    USlobste.rs

    Comments

  53. Improving accessibility with CSS media queries (2025)
    USlobste.rs

    Comments

  54. Whatever Happened to Fire Escapes
    USHacker News Front Page

    Article URL: https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes Comments URL: https://news.ycombinator.com/item?id=50178455 Points: 157 # Comments: 119

  55. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
    USHacker News Front Page

    Article URL: https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/ Comments URL: https://news.ycombinator.com/item?id=50177916 Points: 811 # Comments: 392

  56. The 1.5°C goal of the Paris Agreement is no longer viable
    USHacker News Front Page

    Article URL: https://unric.org/en/unep-emissions-gap-report-2026-1-5-degree-overshoot/ Comments URL: https://news.ycombinator.com/item?id=50177911 Points: 499 # Comments: 556

  57. Unikernels in OCaml
    USlobste.rs

    Comments

  58. ConcurrentML: Improving on Go's concurrency model
    USlobste.rs

    Comments

  59. Vector Graphics in Lil
    USlobste.rs

    Comments

  60. Announcing the GPU notification group and Linker Working Area
    USlobste.rs

    Comments

  61. Firefox security patch tests are now private for at least a week
    USlobste.rs

    Comments

  62. The Future of CSS
    USlobste.rs

    Comments

  63. C vs. C#: racing VLC's Gaussian blur
    USHacker News Front Page

    Article URL: https://martinfinkel.com/blog/gaussian-blur-c-vs-csharp/ Comments URL: https://news.ycombinator.com/item?id=50176544 Points: 115 # Comments: 37

  64. Using LLM for confidence scoring is a bad idea
    USHacker News Front Page

    Article URL: https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html Comments URL: https://news.ycombinator.com/item?id=50176082 Points: 183 # Comments: 96

  65. PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)
    USHacker News Front Page

    Article URL: https://jackalsyn.com/posts/php-up-2026.html Comments URL: https://news.ycombinator.com/item?id=50176077 Points: 128 # Comments: 34

  66. Foreword: Pre-Generation Prediction and Characterisation of LLM Test Failures using the Jacobian Lens
    USarXiv cs.SE (Software)

    arXiv:2610.28187v1 Announce Type: new Abstract: Testing LLM-based software is expensive: each input needs several sampled responses, each judged by a costly oracle. Further, every prompt or model change calls for re-testing. Pre-generation…

  67. Can Language Models Replace Programmers for Coding? REPOCOD Says 'Not Yet'
    USarXiv cs.SE (Software)

    arXiv:2410.21647v5 Announce Type: replace Abstract: Recently, a number of repository-level code generation benchmarks-such as CoderEval, DevEval, RepoEval, RepoBench, and LongCodeArena-have emerged to evaluate the capabilities of large…

  68. LLMs are Brittle to Simple Code Transformations: Introducing CETBench - A Benchmark for Code-Equivalence Checking
    USarXiv cs.SE (Software)

    arXiv:2506.04019v2 Announce Type: replace Abstract: We study how well LLMs can determine whether two programs are functionally equivalent. This is an important problem because benchmarking code equivalence helps assess LLM capability in…

  69. Enhancing Bug-Exposing Test Generation via Step-Level Credit Assignment and Self-Distillation from Valuable Failures
    USarXiv cs.SE (Software)

    arXiv:2610.27694v1 Announce Type: new Abstract: Large Language Models have shown strong code generation capabilities, yet their outputs often contain subtle bugs. Automatically repairing such code requires informative tests: inputs that…

  70. What is a Good Projection?: Correctness and Separation Results of End-Point Projections
    USarXiv cs.PL (Programming)

    arXiv:2610.28525v1 Announce Type: new Abstract: \emph{Multiparty session types} (MPST) is a type discipline for ensuring distributed programs are implemented correctly \emph{by construction}. MPST starts by specifying a choreographic…

  71. Computable Quantification in Reflective Grounded Arithmetic
    USarXiv cs.PL (Programming)

    arXiv:2607.25533v2 Announce Type: replace-cross Abstract: Informal statements of G\"odel's incompleteness theorems often run: "any consistent formal system with arithmetic has true but unprovable statements." That reading assumes a…

  72. TraceLite: Efficient Trace Reduction for SWE Agents via Optical Compression and Redundancy Removal
    USarXiv cs.SE (Software)

    arXiv:2610.28612v1 Announce Type: new Abstract: Software engineering agents solve repository-level tasks through iterative tool use, but their continuously growing interaction traces incur substantial token consumption and inference…

  73. Learning from Past Mistakes: AI-Assisted Analytics of Software Defects and Their Fixes for Future Defect Prevention - An Industrial Case Study
    USarXiv cs.SE (Software)

    arXiv:2610.26889v1 Announce Type: new Abstract: Context. Despite advances in software testing and quality assurance, defects continue to recur in industrial software systems. Defect data are routinely collected in issue-tracking systems…

  74. LiveUIBench: Evaluating Agent as App Workflows
    USarXiv cs.SE (Software)

    arXiv:2610.27977v1 Announce Type: new Abstract: Applications provide convenient features for users to complete daily tasks. However, different users may have different or even conflicting requirements for the same application, while the…

  75. Quantum Broker: QoS-Aware Distribution of Quantum Computations
    USarXiv cs.SE (Software)

    arXiv:2610.28342v1 Announce Type: cross Abstract: Cloud-accessible quantum computing has made heterogeneous Quantum Processing Units (QPUs) available through provider platforms that differ in qubit technology, calibration state, queueing…

  76. A Neuro-Symbolic Reasoning Engine for Compilation-Free Patch Presence Testing
    USarXiv cs.SE (Software)

    arXiv:2610.27871v1 Announce Type: new Abstract: Code reuse in modern software ecosystems facilitates the spread of 1-day vulnerabilities, posing significant security risks. Determining if patches are present is crucial, but traditional…

  77. A General Construction of Strict Models in HoTT
    USarXiv cs.PL (Programming)

    arXiv:2610.28370v1 Announce Type: cross Abstract: Homotopy type theory (HoTT) provides a natural setting for studying the metatheory of type theory, as it comes with additional extensionality principles compared to ordinary Martin-L\"of…

  78. Hallucinations of Large Language Models in Cross-Language Code Translation: Phenomena and Mitigation
    USarXiv cs.SE (Software)

    arXiv:2610.27868v1 Announce Type: new Abstract: Code translation converts source code from one programming language to another while preserving its functionality. Although Large Language Models (LLMs) have improved code translation, their…

  79. Certifying Repeatable Entry-Replay Witnesses for COBOL-to-Java Migration
    USarXiv cs.SE (Software)

    arXiv:2610.27272v1 Announce Type: new Abstract: Producing synthetic data for comparison testing a migrated COBOL application is a major challenge that agentic migrations face today. Our prior paper, the Agentic Method for Deterministic…

  80. From Code Generator to Engineering Companion: A Plant-aware Agent for PLC Programming
    USarXiv cs.SE (Software)

    arXiv:2610.28160v1 Announce Type: new Abstract: Programmable Logic Controller (PLC) coding remains a manual, IDE-centric task that demands constant context switching between documentation, project files, and code editors. Recent work has…

  81. RELAY: Scaling Historical Build Restoration through Rule Reuse and Agentic Repair
    USarXiv cs.SE (Software)

    arXiv:2610.27784v1 Announce Type: new Abstract: Vulnerability benchmarks and software engineering research depend on rebuilding historical software. Yet builds rely on external resources, such as base images and packages, that change…

  82. InterType: Breaking the Single-Function Barrier in Neural Binary Type Inference
    USarXiv cs.SE (Software)

    arXiv:2610.26906v1 Announce Type: cross Abstract: Variable type recovery is a critical task in binary reverse engineering, enabling downstream applications such as vulnerability discovery, malware analysis, and security enforcement. While…

  83. Auditing the Product, Not the Recursion: The Evaluation Evidence Behind Recursive Self-Improvement Claims
    USarXiv cs.SE (Software)

    arXiv:2610.27610v1 Announce Type: cross Abstract: Recursive self-improvement (RSI) promises AI systems, such as self-evolving LLM agents, that become better at producing further improvements. Evaluating this promise requires separating…

  84. ExeBench-FHD: Addressing Fidelity Issues in Decompiler Evaluation
    USarXiv cs.SE (Software)

    arXiv:2610.28212v1 Announce Type: new Abstract: ExeBench is one of the most widely used benchmarks for evaluating LLM-based decompilers. We analyze ExeBench and identify nine issues that affect how faithfully a test measures a decompiler…

  85. Training the Whole Agent, Not Just the Model
    USarXiv cs.SE (Software)

    arXiv:2610.28069v1 Announce Type: new Abstract: Training coding agents typically updates the policy while keeping the harness fixed. During training, trajectories reveal flawed repair strategies and interaction problems that vary across…

  86. RAG-NIMBF: A Non-Invasive, Modular Benchmarking Framework for Automated RAG Configuration Analysis
    USarXiv cs.SE (Software)

    arXiv:2610.27816v1 Announce Type: new Abstract: Retrieval-Augmented Generation (RAG) has become the dominant paradigm for grounding the outputs of large language models (LLM) in external knowledge. However, practitioners are faced with a…

  87. Benchmarking CPU, GPU, and ML Power-Flow Solvers from 14 to 70,000 Buses
    USarXiv cs.SE (Software)

    arXiv:2610.27930v1 Announce Type: cross Abstract: Learned surrogates for power-flow (PF) computation are usually motivated by speed, compared against a single CPU-based baseline. We show this comparison is fragile: across 7 open-source…

  88. Record Types Everywhere
    USarXiv cs.PL (Programming)

    arXiv:2610.27519v1 Announce Type: new Abstract: This paper introduces a novel calculus that models first-class environments and function application paradigms using standard record types. By proposing new extensions to general record…

  89. Verified Purely Functional Catenable Real-Time Deques
    USarXiv cs.PL (Programming)

    arXiv:2505.07681v4 Announce Type: replace Abstract: We present OCaml and Rocq implementations of Kaplan and Tarjan's purely functional, real-time catenable deques. The correctness of our Rocq code is machine-checked.

  90. Foundational Refinement Proofs for EVM Bytecode, at the Price of Tokens
    USarXiv cs.PL (Programming)

    arXiv:2607.26306v2 Announce Type: replace Abstract: Relating executable code to a high-level model of its behavior has been a central concern of programming-language research for decades. Formally verified compilers, translation validators…

  91. TreeWalker: Partial Evaluation for Grouped Tree-Ensemble Inference
    USarXiv cs.PL (Programming)

    arXiv:2610.03939v2 Announce Type: replace-cross Abstract: Many prediction tasks evaluate a trained tree ensemble on groups of rows that share feature values: discrete-time survival models expand each patient into $G$ time steps…

  92. Documentation Drift in AI-Generated Pull Requests
    USarXiv cs.SE (Software)

    arXiv:2610.27381v1 Announce Type: new Abstract: AI coding agents now contribute to software repositories at scale, yet their documentation practices remain uncharacterised. We analyse 29,669 AI-generated pull requests from 2,585…

  93. Standards-Guided and Dependency-Aware Code-Level Documentation Generation
    USarXiv cs.SE (Software)

    arXiv:2610.27634v1 Announce Type: new Abstract: Automatically generating high-quality documentation for software repositories remains challenging: existing approaches largely treat documentation as unconstrained text generation, lacking…

  94. From Tokens to Files: Multi-Granularity Detection and Localization of AI-Involved Code
    USarXiv cs.SE (Software)

    arXiv:2610.27863v1 Announce Type: new Abstract: The increasing use of large language models for code generation calls for methods that distinguish purely human-written code from AI-involved code: files in which any part, however small, was…

  95. InterWebCoder: Learning Interactive Webpage Generation from Executable Tests via Reinforcement Learning
    USarXiv cs.SE (Software)

    arXiv:2610.28610v1 Announce Type: new Abstract: Interactive webpages underpin modern applications, but reproducing both their visual appearance and multi-step behavior remains challenging for multimodal large language models (MLLMs)…

  96. Stop Paying by the Letter: Accelerating Full-Chip RTL Simulation with Host-Side Tokenized Logging
    USarXiv cs.SE (Software)

    arXiv:2610.27356v1 Announce Type: cross Abstract: Firmware diagnostic logging (printf) is an essential debug instrument in full-chip SoC design verification, yet it imposes a heavy tax on cycle-accurate RTL simulation: formatting a…

  97. From RL Papers to Framework Code: Inclusion and Review in Seven Open-Source Training Frameworks
    USarXiv cs.SE (Software)

    arXiv:2610.28027v1 Announce Type: cross Abstract: Practitioners use reinforcement learning methods for language models through training frameworks, so a method that a framework includes is one configuration change away for its users. We…

  98. For Coding Agents, the Repository Matters
    USarXiv cs.SE (Software)

    arXiv:2606.28235v2 Announce Type: replace Abstract: In July 2026, about 1,200 AI agents in an internal OpenAI evaluation, meant to run in isolation, used a shared package server as a message board, and about 700 of them joined an attack on…

  99. The Complexity Kink: A Prompt-Side Structural Complexity Index for Code-Generation Reliability
    USarXiv cs.SE (Software)

    arXiv:2609.19616v4 Announce Type: replace-cross Abstract: Measuring complexity from a model's own code is biased by failure: a hard prompt can produce a short, broken program that looks simple. We instead score each prompt's structure on…

  100. Recoverability and Verifier Strength: Two Measured Preconditions for Unattended Agent Self-Improvement
    USarXiv cs.SE (Software)

    arXiv:2610.27465v1 Announce Type: cross Abstract: Agent platforms are starting to improve their own agents: they read a deployed agent's execution traces, derive a change, have an automated verifier approve it, and release it with no human…

  101. Unpacking Security Scanners for GitHub Actions Workflows
    USarXiv cs.SE (Software)

    arXiv:2601.14455v3 Announce Type: replace Abstract: GitHub Actions is a widely used platform to automate the build and deployment of software projects through configurable workflows. As the platform's popularity grows, it also becomes a…

  102. A Hybrid Information Flow Analysis Framework for Android Hybrid Apps
    USarXiv cs.SE (Software)

    arXiv:2610.27288v1 Announce Type: new Abstract: The WebView interface in Android (hybrid) applications enables the native side (e.g., Java) to exchange data with the Web (e.g., JavaScript). This creates cross-language information flow…

  103. Raise or Check? Predicting the Necessity of Additional Fuzzing for Continuous Fuzzing
    USarXiv cs.SE (Software)

    arXiv:2610.27828v1 Announce Type: new Abstract: Continuous fuzzing is used for vulnerability detection in Open Source Software (OSS). Large-scale services such as Google's OSS-Fuzz fuzz over 1,300 projects and have revealed more than…

  104. Object-Oriented Harness: Evolving Agent Harnesses through Object-Oriented Design
    USarXiv cs.SE (Software)

    arXiv:2610.28380v1 Announce Type: cross Abstract: Agent harnesses are executable code that specifies the prompts, tools, and control flow around a language model. A single global harness can struggle with heterogeneous tasks that require…

  105. Execution-Time Validation of Context-Carrying Action Intents in Industrial Cyber-Physical Systems
    USarXiv cs.PL (Programming)

    arXiv:2610.27971v1 Announce Type: new Abstract: In industrial cells, commands from learned policies, operators and schedulers reach the controller after inference, confirmation and transport, and the plant may have changed meanwhile, for…

  106. Mitigating Risks in Software Development through Effective Requirements Engineering
    USarXiv cs.SE (Software)

    arXiv:2305.05800v2 Announce Type: replace Abstract: Problems that originate in requirements are common and expensive in software projects, and they are a recurring cause of late delivery, budget overruns and cancellation. This paper is a…

  107. When Models Edit Too Much: On the Fidelity of Minimal Code Edits
    USarXiv cs.SE (Software)

    arXiv:2609.04061v2 Announce Type: replace Abstract: Large language models (LLMs) are increasingly used to edit existing code, but correctness alone is not enough: useful repairs should also be minimal, reviewable, and faithful to the…

  108. A Multimodal Engineering GraphRAG Framework for Post-Wind-Event Building Assessment and Recovery Inference
    USarXiv cs.SE (Software)

    arXiv:2610.28216v1 Announce Type: cross Abstract: Post-event building assessment requires linking observed physical damage to its consequences for safety, habitability, functionality, and recovery. Yet post-disaster evidence is often…

  109. WAFFLE: Finetuning Multi-Modal Models for Automated Front-End Development
    USarXiv cs.SE (Software)

    arXiv:2410.18362v4 Announce Type: replace Abstract: Web development involves turning UI designs into functional webpages, which can be difficult for both beginners and experienced developers due to the complexity of HTML's hierarchical…

  110. Reusing Assurance Evidence in AI Pipelines: Validity Conditions, a Fail-Closed Release Gate, and a Replay of 714 Public Data Version Control Pipelines
    USarXiv cs.SE (Software)

    arXiv:2610.27672v1 Announce Type: cross Abstract: Rerunning every governance control after every change to an artificial intelligence (AI) pipeline is expensive, so teams reuse earlier results. Reuse is safe only if each control's declared…

  111. ExeBench-FHD: Addressing Fidelity Issues in Decompiler Evaluation
    USarXiv cs.PL (Programming)

    arXiv:2610.28212v1 Announce Type: cross Abstract: ExeBench is one of the most widely used benchmarks for evaluating LLM-based decompilers. We analyze ExeBench and identify nine issues that affect how faithfully a test measures a…

  112. LLMs are Brittle to Simple Code Transformations: Introducing CETBench - A Benchmark for Code-Equivalence Checking
    USarXiv cs.PL (Programming)

    arXiv:2506.04019v2 Announce Type: replace-cross Abstract: We study how well LLMs can determine whether two programs are functionally equivalent. This is an important problem because benchmarking code equivalence helps assess LLM capability…

  113. XRust: Detecting Logical Races in Rust Linux Drivers
    USarXiv cs.SE (Software)

    arXiv:2610.27325v1 Announce Type: new Abstract: Rust is increasingly used in Linux to improve memory safety, but its guarantees do not prevent logical races: individually synchronized operations can still interleave in ways that violate…

  114. Knowledge as Code
    USarXiv cs.SE (Software)

    arXiv:2610.27693v1 Announce Type: new Abstract: For millennia, knowledge has been carried by language, and large language models still put language at the center. Yet the coding agents built on these models mostly write code. This paper is…

  115. AgenticVulHunter: Bringing Local Agentic Vulnerability Hunting to Your Terminal
    USarXiv cs.SE (Software)

    arXiv:2610.27383v1 Announce Type: cross Abstract: Finding vulnerabilities early, before they can affect the production system, is important for reducing the risk of any software attacks. However, detecting vulnerabilities during secure…

  116. MIMOS-Tools: An Integrated Toolchain for Model-Based Design of Embedded Systems
    USarXiv cs.SE (Software)

    arXiv:2610.27826v1 Announce Type: new Abstract: Despite decades of progress in model-based methods and tools for embedded real-time systems, there is still no integrated environment that supports the entire development lifecycle. This…

  117. How Developers Configure LLM Inference: A Large-Scale Study of Real-World Practices
    USarXiv cs.SE (Software)

    arXiv:2610.27945v1 Announce Type: new Abstract: LLMs are increasingly integrated into software systems, making deployment and inference configuration a recurring software engineering task. Inference backends expose many options that affect…

  118. AgenTest: Mining Business Rules to Test LLM Agents for Business Logic Bugs
    USarXiv cs.SE (Software)

    arXiv:2610.28116v1 Announce Type: new Abstract: Large language model (LLM) agents increasingly execute business operations through tools and interact directly with application data and services. Beyond completing user requests, these…

  119. Large Language Models for Agent-Based Modelling: Current and possible uses across the modelling cycle
    USarXiv cs.SE (Software)

    arXiv:2507.05723v1 Announce Type: cross Abstract: The emergence of Large Language Models (LLMs) with increasingly sophisticated natural language understanding and generative capabilities has sparked interest in the Agent-based Modelling…

  120. Industrial ReMEmbR: Scaling Spatiotemporal Memory to Robot Fleets
    USarXiv cs.SE (Software)

    arXiv:2610.28624v1 Announce Type: cross Abstract: Warehouse robot fleets continuously observe operational conditions, but preserving these observations as reusable semantic memory incurs substantial computation, communication, and storage…

  121. Forall-Exists Relational Verification by Filtering to Forall-Forall
    USarXiv cs.PL (Programming)

    arXiv:2509.04777v3 Announce Type: replace-cross Abstract: Relational verification encompasses reasoning about data abstraction, security and privacy, secure compilation, and functional specification of tensor programs, among others…

  122. Noise-aware Verification and Synthesis of Quantum Programs
    USarXiv cs.PL (Programming)

    arXiv:2608.05807v2 Announce Type: replace Abstract: This work provides a comprehensive framework for noise-aware quantum program analysis, ranging from logical foundations to model checking and automated synthesis. While most research on…

  123. Value-level data provenance in an electronic laboratory notebook used by humans and language-model agents: An experience report
    USarXiv cs.SE (Software)

    arXiv:2610.27859v1 Announce Type: cross Abstract: A published laboratory number can be verified only when its raw file and extraction method are known. This paper presents the value-level provenance architecture of APS ELN, an electronic…

  124. Characterizing Post-Incident Software Evolution
    USarXiv cs.SE (Software)

    arXiv:2610.27380v1 Announce Type: new Abstract: BACKGROUND: After a software incident, organizations attempt to improve the reliability of their software systems by conducting post-incident analysis and identifying actions to prevent or…

  125. awesome-console-services: curated list of services reachable via HTTP
    USlobste.rs

    Comments

  126. C# now beats Rust on WASM size
    USHacker News Front Page

    Article URL: https://github.com/zion-sati/NetWasm Comments URL: https://news.ycombinator.com/item?id=50175510 Points: 115 # Comments: 56

  127. In Hilbert space, all things are quantumly possible
    USHacker News Front Page

    Article URL: https://www.quantamagazine.org/in-hilbert-space-all-things-are-quantumly-possible-20260826/ Comments URL: https://news.ycombinator.com/item?id=50175185 Points: 123 # Comments: 66

  128. The Future of CSS
    USHacker News Front Page

    Article URL: https://www.joshwcomeau.com/css/interop-2027/ Comments URL: https://news.ycombinator.com/item?id=50175070 Points: 559 # Comments: 233

  129. Good type against all odds
    USHacker News Front Page

    Article URL: https://unsung.aresluna.org/good-type-against-all-odds/ Comments URL: https://news.ycombinator.com/item?id=50175059 Points: 174 # Comments: 15

  130. Lobsters NYC Meetup on the 28th of October
    USlobste.rs

    I previously arranged (by PMing everyone who mentioned it) a 5 Lobster meetup in Mexico. I'll be in NYC next week and think this could be nice. There will be cross contamination from Array Language people. We can target e.g. 5:30PM until…

  131. Muse exposes users' personal and business secrets when they share conversations
    USHacker News Front Page

    Article URL: https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/ Comments URL: https://news.ycombinator.com/item?id=50174687 Points: 325 # Comments: 146

  132. Unauthorized Access to PingCAP Cloud Resources
    USlobste.rs

    Comments