SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

.NET 10 Rejects Malformed LDAP VLV Strings That .NET 9 Silently Mangled

0
·1 views

Microsoft introduced a breaking change in .NET 10 that causes VlvRequestControl to throw an EncoderFallbackException when an application passes unpaired UTF-16 surrogates as a virtual-list-view target. Previously, .NET 9 silently substituted the UTF-8 replacement character (EF BF BD) for invalid surrogates during serialization, which could cause LDAP queries to seek unintended positions in a sorted result set. The stricter behavior ensures the bytes sent over the wire accurately reflect the string provided by the caller. Developers can verify the difference using a single project targeting both net9.0 and net10.0 runtimes, calling VlvRequestControl.GetValue() without needing a live LDAP connection. Applications that have been passing malformed strings to VlvRequestControl must add input validation before upgrading to .NET 10.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

GitHub Project Routes ChatGPT Planning to Codex Execution via Local Bridge

A public GitHub project called 'Codex with ChatGPT' separates the planning and code-review roles from actual code execution by assigning reasoning tasks to the ChatGPT web app while Codex handles file edits, shell commands, and test runs. The two tools communicate through a local C2C Bridge using structured state messages, with ChatGPT accessing repository context via nine read-only tools covering file reads, Git status, diffs, and test outputs. The project's security design keeps full file bodies and logs out of control-plane messages, and the bridge itself has no write, delete, shell, or commit capabilities, with sensitive paths blocked by default. Setup requires Git, Node.js 20 or later, and Cloudflare's tunneling tool, and uses OAuth 2.1 with one-time pairing codes for the publicly reachable endpoint. The project is an unofficial community effort and has not been endorsed or independently security-assessed by OpenAI.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

EarthLink Network Built Its Entire Operation on AI, Letting Humans Retain Only Judgment

EarthLink Network made AI the operational foundation of its entire company, starting from the premise that all work should run on AI rather than selectively assigning tasks to it. Rather than drawing a human-AI boundary in advance, the company handed over all work to AI first and observed what remained. Through this process, routine tasks with fixed steps — such as data gathering, text cleanup, and repetitive formatting — migrated to AI naturally. What stayed on the human side was judgment: setting priorities, deciding what to drop, and taking responsibility. The company frames this outcome not as an ideology but as a practical conclusion derived from running the experiment and measuring results by convenience and efficiency.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Ditches Needle2 for llama.cpp and Granite After Local Tool-Calling Tests

A developer building a semantic shell — which maps natural language commands to local filesystem tools — initially tested Needle2, a small model designed for tool calling and structured extraction. While Needle2 worked in basic scenarios, problems emerged as the tool set grew beyond a handful of options, since its retrieval-based shortlisting risked excluding the correct tool before final selection. The developer also found that small models are highly sensitive to tool descriptions, requiring precise, disambiguating language rather than brief documentation-style text. Concerns about whether confidence scores across candidate groups were globally comparable added further uncertainty. Ultimately, the need for native C++ integration without external processes led the developer to switch to llama.cpp paired with the Granite model.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Overreliance Risks Skill Loss and Declining Model Quality, Researchers Warn

Experts and researchers are raising concerns that heavy reliance on AI tools is causing skilled workers to lose their expertise over time. As users depend more on AI-generated outputs, institutional knowledge is gradually eroding rather than being preserved. This degraded human knowledge then feeds back into AI models as training input, a phenomenon researchers call 'knowledge collapse.' The cycle results in progressively worse model outputs as the quality of human-generated input declines. Multiple studies and papers, including research on semantic entropy and AI's impact on human cognition, are highlighting this feedback loop as a growing risk.

0 comments Read more at DEV Community
.NET 10 Rejects Malformed LDAP VLV Strings That .NET 9 Silently Mangled · ShortSingh