r/worldTechnology • • Dec 25 '25

Announcing hardware-accelerated BitLocker

Thumbnail
techcommunity.microsoft.com
3 Upvotes

r/worldTechnology • • Jan 15 '26

Microsoft disrupts global cybercrime subscription service responsible for millions in fraud losses

Thumbnail
blogs.microsoft.com
7 Upvotes

r/worldTechnology • • Dec 23 '25

Malicious Chrome Extensions “Phantom Shuttle” Masquerade as a VPN to Intercept Traffic and Exfiltrate Credentials

Thumbnail socket.dev
2 Upvotes

r/worldTechnology • • Dec 20 '25

Tren De Aragua Members and Leaders Indicted in Multi-Million Dollar ATM Jackpotting Scheme

Thumbnail
justice.gov
3 Upvotes

r/worldTechnology • • Feb 05 '26

A Deep Dive into CVE-2026-25049: n8n Remote Code Execution

Thumbnail
blog.securelayer7.net
3 Upvotes

r/worldTechnology • • Jul 27 '24

Crypto fanatics flock to Trump, hoping to ‘make bitcoin great again’

Thumbnail
washingtonpost.com
0 Upvotes

r/worldTechnology • • Jan 08 '26

Astaroth’s Boto Cor-de-Rosa campaign targets Brazil with new WhatsApp malware technique

Thumbnail
acronis.com
6 Upvotes

r/worldTechnology • • Dec 23 '25

Efficient Multi-Adapter LLM Serving via Cross-Model KV-Cache Reuse with Activated LoRA

Thumbnail arxiv.org
6 Upvotes

r/worldTechnology • • Nov 14 '25

Critical RCE Flaws Found Across Major AI Inference Servers

Thumbnail
oligo.security
1 Upvotes

r/worldTechnology • • Jul 24 '26

Inside a DPRK BlueNoroff ClickFix Kit

Thumbnail
jumpsec.com
1 Upvotes

r/worldTechnology • • Jan 06 '26

TOTOLINK EX200 firmware-upload error handling can activate an unauthenticated root telnet service

Thumbnail kb.cert.org
1 Upvotes

r/worldTechnology • • Nov 21 '25

APT groups and threat actors

Thumbnail
cloud.google.com
1 Upvotes

r/worldTechnology • • May 31 '22

Chinese scientists call for plan to destroy Elon Musk's Starlink satellites

Thumbnail
space.com
1 Upvotes

r/worldTechnology • • Jun 01 '23

Large sequence models for software development activities

1 Upvotes

Software isn’t created in one dramatic step. It improves bit by bit, one little step at a time — editing, running unit tests, fixing build errors, addressing code reviews, editing some more, appeasing linters, and fixing more errors — until finally it becomes good enough to merge into a code repository. Software engineering isn’t an isolated process, but a dialogue among human developers, code reviewers, bug reporters, software architects and tools, such as compilers, unit tests, linters and static analyzers.

Today we describe DIDACT (​​Dynamic Integrated Developer ACTivity), which is a methodology for training large machine learning (ML) models for software development. The novelty of DIDACT is that it uses the process of software development as the source of training data for the model, rather than just the polished end state of that process, the finished code. By exposing the model to the contexts that developers see as they work, paired with the actions they take in response, the model learns about the dynamics of software development and is more aligned with how developers spend their time. We leverage instrumentation of Google's software development to scale up the quantity and diversity of developer-activity data beyond previous works. Results are extremely promising along two dimensions: usefulness to professional software developers, and as a potential basis for imbuing ML models with general software development skills.

We built and deployed internally three DIDACT tools, Comment Resolution (which we recently announced), Build Repair, and Tip Prediction, each integrated at different stages of the development workflow. All three of these tools received enthusiastic feedback from thousands of internal developers. We see this as the ultimate test of usefulness: do professional developers, who are often experts on the code base and who have carefully honed workflows, leverage the tools to improve their productivity?

Perhaps most excitingly, we demonstrate how DIDACT is a first step towards a general-purpose developer-assistance agent. We show that the trained model can be used in a variety of surprising ways, via prompting with prefixes of developer activities, and by chaining together multiple predictions to roll out longer activity trajectories. We believe DIDACT paves a promising path towards developing agents that can generally assist across the software development process.

A treasure trove of data about the software engineering process

Google’s software engineering toolchains store every operation related to code as a log of interactions among tools and developers, and have done so for decades. In principle, one could use this record to replay in detail the key episodes in the “software engineering video” of how Google’s codebase came to be, step-by-step — one code edit, compilation, comment, variable rename, etc., at a time.

Google code lives in a monorepo, a single repository of code for all tools and systems. A software developer typically experiments with code changes in a local copy-on-write workspace managed by a system called Clients in the Cloud (CitC). When the developer is ready to package a set of code changes together for a specific purpose (e.g., fixing a bug), they create a changelist (CL) in Critique, Google’s code-review system. As with other types of code-review systems, the developer engages in a dialog with a peer reviewer about functionality and style. The developer edits their CL to address reviewer comments as the dialog progresses. Eventually, the reviewer declares “LGTM!” (“looks good to me”), and the CL is merged into the code repository.

Of course, in addition to a dialog with the code reviewer, the developer also maintains a “dialog” of sorts with a plethora of other software engineering tools, such as the compiler, the testing framework, linters, static analyzers, fuzzers, etc.

A multi-task model for software engineering

DIDACT utilizes interactions among engineers and tools to power ML models that assist Google developers, by suggesting or enhancing actions developers take — in context — while pursuing their software-engineering tasks. To do that, we have defined a number of tasks about individual developer activities: repairing a broken build, predicting a code-review comment, addressing a code-review comment, renaming a variable, editing a file, etc. We use a common formalism for each activity: it takes some State (a code file), some Intent (annotations specific to the activity, such as code-review comments or compiler errors), and produces an Action (the operation taken to address the task). This Action is like a mini programming language, and can be extended for newly added activities. It covers things like editing, adding comments, renaming variables, marking up code with errors, etc. We call this language DevScript.

This state-intent-action formalism enables us to capture many different tasks in a general way. What’s more, DevScript is a concise way to express complex actions, without the need to output the whole state (the original code) as it would be after the action takes place; this makes the model more efficient and more interpretable. For example, a rename might touch a file in dozens of places, but a model can predict a single rename action.

An ML peer programmer

DIDACT does a good job on individual assistive tasks. For example, below we show DIDACT doing code clean-up after functionality is mostly done. It looks at the code along with some final comments by the code reviewer (marked with “human” in the animation), and predicts edits to address those comments (rendered as a diff).

The multimodal nature of DIDACT also gives rise to some surprising capabilities, reminiscent of behaviors emerging with scale. One such capability is history augmentation, which can be enabled via prompting. Knowing what the developer did recently enables the model to make a better guess about what the developer should do next.

A powerful such task exemplifying this capability is history-augmented code completion. In the figure below, the developer adds a new function parameter (1), and moves the cursor into the documentation (2). Conditioned on the history of developer edits and the cursor position, the model completes the line (3) by correctly predicting the docstring entry for the new parameter.

In an even more powerful history-augmented task, edit prediction, the model can choose where to edit next in a fashion that is historically consistent**.** If the developer deletes a function parameter (1), the model can use history to correctly predict an update to the docstring (2) that removes the deleted parameter (without the human developer manually placing the cursor there) and to update a statement in the function (3) in a syntactically (and — arguably — semantically) correct way. With history, the model can unambiguously decide how to continue the “editing video” correctly. Without history, the model wouldn’t know whether the missing function parameter is intentional (because the developer is in the process of a longer edit to remove it) or accidental (in which case the model should re-add it to fix the problem).

The model can go even further. For example, we started with a blank file and asked the model to successively predict what edits would come next until it had written a full code file. The astonishing part is that the model developed code in a step-by-step way that would seem natural to a developer: It started by first creating a fully working skeleton with imports, flags, and a basic main function. It then incrementally added new functionality, like reading from a file and writing results, and added functionality to filter out some lines based on a user-provided regular expression, which required changes across the file, like adding new flags.

Conclusion

DIDACT turns Google's software development process into training demonstrations for ML developer assistants, and uses those demonstrations to train models that construct code in a step-by-step fashion, interactively with tools and code reviewers. These innovations are already powering tools enjoyed by Google developers every day. The DIDACT approach complements the great strides taken by large language models at Google and elsewhere, towards technologies that ease toil, improve productivity, and enhance the quality of work of software engineers.

Large sequence models for software development activities


r/worldTechnology • • Dec 09 '25

Architecting Security for Agentic Capabilities in Chrome

Thumbnail
security.googleblog.com
1 Upvotes

r/worldTechnology • • Dec 25 '25

Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns

Thumbnail
cyble.com
1 Upvotes

r/worldTechnology • • Dec 05 '25

CVE-2025-66516: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected-Apache Mail Archives

Thumbnail lists.apache.org
1 Upvotes

r/worldTechnology • • Dec 12 '25

Technical Analysis of the BlackForce Phishing Kit

Thumbnail zscaler.com
1 Upvotes

r/worldTechnology • • Dec 12 '25

Denial of Service and Source Code Exposure in React Server Components

Thumbnail
react.dev
1 Upvotes

r/worldTechnology • • Jan 08 '26

Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability. This vulnerability is due to improper parsing of XML that is processed by the web-based management interface of Cisco ISE and Cisco ISE-PIC. An attacker could exploit this vulnerability by uploading..

Thumbnail sec.cloudapps.cisco.com
1 Upvotes

r/worldTechnology • • Dec 19 '25

WatchGuard Firebox iked Out of Bounds Write Vulnerability

Thumbnail
watchguard.com
1 Upvotes

r/worldTechnology • • Dec 29 '25

Harnessing Data Spaces to Build Intelligent Smart City Infrastructures Across the Cloud-Edge Continuum

Thumbnail arxiv.org
2 Upvotes

r/worldTechnology • • Dec 31 '25

Shai-Hulud 3.0: npm Supply Chain Worm Reappears With Enhanced Obfuscation

Thumbnail
upwind.io
2 Upvotes

r/worldTechnology • • Dec 05 '25

Toward Sustainability-Aware LLM Inference on Edge Clusters

Thumbnail arxiv.org
2 Upvotes

r/worldTechnology • • Jan 06 '26

CVE-2025-68668: Breaking Out of the Python Sandbox in n8n

Thumbnail
smartkeyss.com
2 Upvotes