stefan brunthaler

@sbrunthaler
51 Followers
42 Following
419 Posts

https://www.unibw.de/ucsrl-en

Language-based security is the continuation of compiler construction by other means.

PLs, pretty much all things compilers.

Do you want to be my new colleague in Stuttgart?

We just opened a tenured professor position for researchers in Programming Languages. So, if you are working in this field, including but not limited to Program Analysis, Compilers, Runtime Environments, Constructive PL, Empirical PL, Quantum PL, ... please consider applying.

If you are not in this field, please repost and boost. 📣

https://www.f05.uni-stuttgart.de/en/faculty/news/news/Professorship-W3-in-Programming-Languages/

Professorship (W3) in Programming Languages | News | Mar 26, 2026 | Faculty 5: Computer Science, Electrical Engineering and Information Technology | University of Stuttgart

INSTITUTE OF SOFTWARE ENGINEERING | AT THE NEXT POSSIBLE DATE

I am insanely proud about the following, even though I am not at all involved any more:

https://opentelemetry.io/blog/2026/profiles-alpha/

Working with the optimyze team was so awesome.

OpenTelemetry Profiling Enters Public Alpha

Since OpenTelemetry first introduced Profiles, momentum has only grown towards building a unified industry standard for continuous production profiling, standing alongside traces, metrics, and logs. Today, the Profiling SIG is proud to announce that the Profiles signal has officially entered public Alpha, and we are ready for broader community use and feedback. Production profiling for all Continuously capturing low-overhead performance profiles in production is a technique that has been used for decades. It helps troubleshoot production incidents, improves user experience by making software faster and reduces computation costs by making the same work take less resources. Historically, the industry lacked a common framework and protocol for continuous profiling, even with formats like JFR and pprof being popular.

OpenTelemetry
a colleague of mine, on a whim, told a coding agent to make a js implementation that passes all of test262. such a thing does not exist in the wild, despite hundreds of millions of investment in JS. the results are much better than i had expected https://p.ocmatos.com/blog/jsse-a-javascript-engine-built-by-an-agent.html
JSSE: A JavaScript Engine Built by an Agent - Notes & Code

JSSE is the first JavaScript engine to pass 100% of test262 non-staging tests. 170,000 lines of Rust. Zero lines written by me.

Notes & Code
Ugh.. when people won't take fixes because in their opinion the C specification is wrong and their feeling about how compilers work should be how it works:
https://lore.kernel.org/lkml/CAADnVQJN[email protected]/
Re: [PATCH v1 1/2] libbpf: Fix strict aliasing violations in hashmap - Alexei Starovoitov

The current and projected impact of AI and formalization on the practice of mathematics is analogous to the impact that the automobile had on the evolution of cities.

Before the introduction of the automobile, city streets were narrow and optimized for humans, horses, and carriages. When cars, buses, and trams were introduced, they were undoubtedly faster and more powerful than any prior form of transport; but they would clog the roads and crowd out pedestrians.

Over time, new roads, railways, and freeways were built for the exclusive use of mechanized vehicles, enabling rapid and efficient long-distance travel; but this came at the cost of urban sprawl, the degradation or destruction of once-walkable communities, traffic congestion, and significant environmental impacts.

It was only belatedly realized that to resolve these problems, it was not sufficient to simply make automobiles faster, more powerful, or more energy efficient, or to bulldoze all the old roads and networks to make way for new ones. Thoughtful urban planning, as well as the development of social and legal rules on how to manage traffic, were necessary to allow both pedestrian and automotive transport to co-exist in a manner that retained the benefits of both. (1/5)

Both first-stage bugs exploited by this chain are in JavaScriptCore. We should improve how we build JavaScript JITs somewhat.

https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain

The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors | Google Cloud Blog

DarkSword is a new iOS exploit chain that leverages multiple zero-day vulnerabilities to fully compromise iOS devices.

Google Cloud Blog

@ilyasergey: "I formalised and proved the correctness of Move’s new borrow checker in Lean: 39,000 lines of mechanised metatheory, produced in under a month with the help of an AI coding assistant. This post tells the story of how it went and what it means for the future of PL research."

https://proofsandintuitions.net/2026/03/18/move-borrow-checker-lean/

Verifying Move Borrow Checker in Lean: an Experiment in AI-Assisted PL Metatheory

I formalised and proved the correctness of Move’s new borrow checker in Lean: 39,000 lines of mechanised metatheory, produced in under a month with the help of an AI coding assistant. This post tells the story of how it went and what it means for the future of PL research.

Proofs and Intuitions
Real or slop? Can you tell which PL paper is real and which is slop? This is brilliant.
https://slop.zackg.me/
Real or Slop? — PL Papers Edition

Nextcloud im Praxistest: Es ist BESSER als Teams | c't 3003

Mit Nextcloud gibt es eine deutsche Alternative zu Dropbox, Teams, Slack und all den anderen US-Anbietern. c't 3003 hat sie selbst gehostet und ausprobiert.

https://www.heise.de/news/Nextcloud-im-Praxistest-Es-ist-BESSER-als-Teams-c-t-3003-11201042.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#ct #Entertainment #IT #news

Nextcloud im Praxistest: Es ist BESSER als Teams | c't 3003

Mit Nextcloud gibt es eine deutsche Alternative zu Dropbox, Teams, Slack und all den anderen US-Anbietern. c't 3003 hat sie selbst gehostet und ausprobiert.

heise online

Had a great time hanging out at MoreVMs today, thanks to @smarr and @sbrunthaler for the invitation and for organizing!

I believe my talk was recorded, so hopefully I can share soon.