AI Weekly Malaysia

Layer3 Intel's Residential Proxy Observatory recorded 236 residential-proxy exits through AS2650—registered to the Executive Office of the President—from 6 addresses on 26 of 30 days between October 5 and November 3, 2026, across 28 separate proxy services. The exits clustered between 5 p.m. and midnight Eastern, were independently flagged by Spur and Synthient, and the article notes that anyone paying a few dollars for rotating residential proxy access could obtain similar traffic. It also cites the Kimwolf botnet reaching at least 2 million mostly Android devices via exposed ADB and reports 413 addresses and 32,000+ observations in Saint Helena, Ascension and Tristan da Cunha.

DreamHost confirmed hackers accessed customer files and inboxes in a breach that began in August and was only disclosed last Thursday after causing a multi-day outage and password resets. The entry point was an unspecified vulnerability in DreamHost's file manager, and attackers stole session tokens — which keep users logged in without re-entering a password — not just credentials. DreamHost says affected customers are "well under 10%" of its 400,000 paying customers but declined to give a number, describe the vulnerability, or explain the months-long detection gap; it says the flaw is unrelated to recent PHP vulnerabilities.

An Ars Technica opinion/analysis piece by Eric Berger, published November 4, 2026, framed around Texas voting blue and asking what that means for Elon Musk and SpaceX, with the subhead quoting 'Data centers in space looking pretty appealing right now' and a line saying 'Texas did not want a bought Senator.' The supplied text is almost entirely page navigation and boilerplate — only the headline, standfirst, byline, date, and a comment count (109) are actually present, with no details on Texas policy, SpaceX operations, incentives, or data center plans.

Kate St. John's November 3, 2026 post on the Outside My Window nature blog argues that insects swarm incandescent lights but not LEDs because incandescent bulbs emit UV and LEDs don't — and then opens with a correction banner saying commenters pointed out she has the incandescent/LED UV issue backwards, so the piece is 'about to change a lot.' The post leans on a secondhand anecdote from Veracruz guide Roland Rumm, whose family's geckos stopped visiting an outdoor dining area after it switched to LED, plus a 2024 BBC explainer on insects navigating by moonlight and a 2016 University of Bristol field experiment comparing incandescent, compact fluorescent, cool-white LED and warm-white LED. It drew 301 points and 154 comments on Hacker News.

CNBC reported that big tech stocks jumped on Wednesday, Nov. 4, 2026, after Democrats flipped both the House and Senate in the midterms: Amazon +8%, Google +6%, Apple nearly +7%, Microsoft +4%, Meta +3%. JPMorgan Asset Management chief global strategist David Kelly attributed the move to reduced uncertainty and a divided government producing "moderation in growth, moderation in inflation, less uncertainty." The article also notes analysts expect hyperscalers to benefit from increased regulation, but gives no policy detail, no bill names, and no timeline.

TechCrunch posted a 36-minute Equity podcast video dated November 4, 2026, featuring Hugging Face Chief Policy Officer and SVP of Strategy Irene Solaiman discussing how companies capture value from open source AI, what startups should know before building on open models, tool and infrastructure choices, and competition from Chinese open models. The page text is mostly navigation, event promos, and bios, with no model names, benchmarks, licensing terms, prices, or concrete examples.

Google told schools they can disable Gemini, but said turning off its other AI features would also remove Google Search; Google's education footprint includes roughly 50 million Chromebooks in schools and over 150 million Google Classroom users globally. DuckDuckGo responded by pointing schools to documentation for switching their default search engine to DuckDuckGo, with CEO Gabriel Weinberg offering help and chief public affairs officer Kamyl Bazbaz calling Google a monopolist 'forcing AI on school children.' The article also mentions Google's 'Guided Learning' technology for educators but is truncated before explaining it.

This is Latent Space's AINews roundup for 11/02/2026–11/03/2026 (they scanned 12 subreddits and 544 Twitter accounts, no Discords), plus a behind-the-scenes segment on AI Engineer Shanghai and an interview on Latent Space's history. The main item is the dispute over the earlier "Weight Space Programming" headline story: the editors concede some claims were framed too favorably, but say multiple independent replications exist — including Alex Krentsel's replication showing a sharp capability jump across model generations, with the latest models generating Breakout networks scoring up to 22× an RL-trained baseline, and a Hugging Face reproduction (the excerpt cuts off mid-sentence there).

Sen. Ted Cruz is pushing to add another Republican to the FCC during the Senate's lame-duck session before Democrats take control, according to Ars Technica. The article says Cruz and Trump appear to have no plans to fill the FCC's empty Democratic seat; the piece drew 50 comments.

Ricursive Intelligence released Ripple-65B Preview, a dense open-weight general-purpose model pretrained on 12 trillion tokens with up to 1M context, claiming U.S. open-weight state of the art on agentic coding with 80.52 on TerminalBench 2.1. It says the model beats larger U.S. open-weight models including Reflection Beam 501B at 80.1 and Meta Muse Spark Open 816B at 76.4, and that full R&D from scratch cost $32M. It is available on Hugging Face, Together AI, GMI Cloud, and OpenRouter, with Fireworks said to go live later.

TechCrunch Equity episode published Nov 4, 2026 features Rebecca Bellan speaking with Irene Solaiman, Hugging Face's Chief Policy Officer and SVP of Strategy, about building on open source AI. The episode description lists topics: cost savings versus using the most powerful models, who captures value when models are free, US versus Chinese open models, and security questions after recent attacks on open AI platforms. It contains no specific prices, model versions, license terms, incident details, or measured cost comparisons.

Google responded after a New York Times report said it would turn off Search for schools that reject AI entirely, drawing criticism from Sen. Bernie Sanders and New York City Mayor Zohran Mamdani, who called it monopoly pressure and 'extortion.' Google clarified that Gemini, Gemini Notebook, and Search will be off by default in its Classroom AI push, and schools can turn one or all of them back on. Chris Phillips, Google's VP for education, told the Times that 'Search and AI are deeply integrated.'

Waymo will end its exclusivity with Uber in Austin and Atlanta starting January 2028, letting riders book directly through Waymo's own app instead of only through Uber. Waymo co-CEO Tekedra Mawakana told Bloomberg the Uber arrangement was 'a little bit of a crapshoot' for riders because they could never be sure whether a robotaxi or a human-driven car would show up, and said Waymo wants a direct rider relationship; Uber says it still plans to host Waymo vehicles on its app and that skipping a dedicated robotaxi booking option in Uber's app was Waymo's call. The original Uber deal was reportedly set to expire in May 2028, per earlier Financial Times reporting.

Waymo co-CEO Tekedra Mawakana told Bloomberg that Waymo will stop offering rides through Uber in Austin and Atlanta starting January 2028, moving riders to Waymo's own app instead; the Uber deal had been set to expire in May 2028. Mawakana said the Uber experience was 'a little bit of a crapshoot' because riders can't be sure they'll get a robotaxi rather than a human-driven car, and that direct rider relationships matter. Uber told TechCrunch it still plans to host Waymo robotaxis on its app for as long as both companies agree, and told Bloomberg that not adding a direct robotaxi booking option in Uber's app was Waymo's idea.

Waymo co-CEO Tekedra Mawakana told Bloomberg that Waymo will stop offering rides through Uber in Austin and Atlanta starting January 2028, ahead of the original deal expiry in May 2028, and will instead take bookings through its own app as it does in other cities. Mawakana said the Uber arrangement made the rider experience "a little bit of a crapshoot" because riders could not be sure whether they would get a robotaxi or a human-driven car, and that Waymo wants a direct rider relationship. Uber told Bloomberg it was Waymo's idea not to add a direct robotaxi booking option inside Uber's app.

TechCrunch reports that A24 posted on Instagram that NASA requested a screening of 'You Can See Everything' — the Elizabeth Holmes documentary directed by Nathan Fielder and Lance Oppenheim — on the International Space Station. The film is currently number one at the box office after a limited North American rollout, but has no UK release until November 20 and no French release until December 30, with Sony Pictures holding rights for Germany, Latin America, South Korea and other territories without announced plans.

The only content retrieved for this Ars Technica item is the site's cookie-consent and privacy-centre boilerplate — no specifications, price, ship date, manufacturer, or test results for the Enough Phone appear in the text. The headline claims the device will "put that to the test" regarding stated demand for small smartphones, but nothing in the body supports or details that claim. There is no substantive article here to summarise.

The Go team published a post describing encoding/json/v2 and encoding/json/jsontext, now stable and generally available in Go 1.27 after last year's experimental release. The new API changes default behaviors that encoding/json got wrong: it rejects invalid UTF-8 rather than silently corrupting data (RFC 8259 requires valid UTF-8), rejects objects with duplicate member names instead of picking an arbitrary value, and addresses nil slices/maps marshaling to JSON null, which breaks consumers that disallow null where an array or object is expected. The post cites CVE-2017-12635 as a case where duplicate-name ambiguity was exploited.

Dharma-AI published a Hugging Face blog post for Dharma Field Extractor, a 2-billion-parameter model that takes a document image plus either an open request or an exact schema and returns structured JSON — invoice line items as ordered lists, ID fields under your own column names, medical requisition fields ready to schedule — with one checkpoint and no per-type fine-tuning. It follows their April DharmaOCR-LITE OCR model, and the post frames it as the opposite tradeoff: OCR gives you the whole page faithfully, the Field Extractor gives you only the fields a downstream system consumes. The post claims it outperforms every frontier LLM they tested at a fraction of the cost and latency, but the excerpt contains no benchmark numbers, no pricing, no license, and only 11 upvotes on the post.

Sequoia Capital posted a memo on X titled “The Sequoia of Tomorrow,” saying it raised roughly $10 billion in new funds while closing its London office, shutting its Arc accelerator and Scouts program, merging early-stage and growth teams, flattening its partnership, and killing the Monday partner meeting. The firm frames the move as rewinding a roughly 20-year expansion that created unwanted hierarchy. Arc launched in March 2022 as a seven-week batch accelerator giving admitted companies $500,000 to $1 million up front; Scouts launched around 2009 and gave small checks to founders and operators to invest on Sequoia’s behalf.

Tom's Hardware reports that Macronix, a supplier of Nintendo ROM chips, is exiting that business to focus on chips for AI data centers. The headline-level consequence given is that large game storage chips become more expensive and Game-Key cards may become more common. The supplied page text contains only site navigation and subscription boilerplate — no figures, dates, quotes, or named sources — so none of the claimed details can be verified from this item.

Uber reported Q3 2026 revenue of $14.77B versus $14.69B expected, up 10% year over year, but EPS came in at 25 cents versus 96 cents expected. Mobility revenue fell 2% to $7.52B and missed the $7.71B estimate, while delivery revenue rose 23% to $5.49B and slightly missed estimates. Uber also said it plans to have over 2,000 fully driverless vehicles on its platform by the end of 2027.

The Hacker News headline reports a flaw in APT, the package manager used by Debian and Ubuntu, that reportedly lets man-in-the-middle attackers swap packages that had already passed verification and execute code as root. The published body text for this item did not come through — the excerpt is site navigation and boilerplate — so there are no CVE identifiers, affected APT versions, patch status, or attack preconditions available here.

SonicWall has said it will not issue fixes for vulnerabilities in its Global Management System (GMS) because the product is end-of-life. Per the headline, the flaws could expose files and alter database records. The supplied article text is almost entirely site navigation and does not include CVE identifiers, affected version numbers, researcher attribution, or a SonicWall statement, so the technical detail available here is limited to the title.

This is a recap of Jim Cramer's CNBC Investing Club "Morning Meeting" livestream from Wednesday, Nov 4, 2026, not a technology story. The concrete claims: stocks rallied after a Democratic sweep of the midterms, with the club's read being that Democratic control of both the House and Senate could slow the AI data-center buildout — lifting Amazon, Alphabet, Meta and Microsoft while hitting Micron (-6%) and CoreWeave (-9%) — and Capital One fell nearly 3% on fears of renewed credit-card interest-rate caps, which Cramer called a buying opportunity while cautioning against entering immediately. The excerpt is truncated mid-sentence and contains no product, version, price, API, or technical detail.