AI Weekly Malaysia

Anthropic's most capable AI model is reportedly struggling to attract users as cheaper competing tools gain traction. The FT article (paywalled) suggests a market shift where cost is outweighing benchmark performance in user adoption decisions.

Fabien Sanglard shares his agent.md file—a set of coding style rules injected into LLM coding sessions via agentic IDEs like Antigravity and VS Code's Claude Code plugin. After finding AI-generated code unusable (spaghetti, no comments, no structure), he iterated by repeatedly giving the same feedback, then codified those rules into agent.md: no magic numbers, function names under 30 characters, enums over booleans for parameters, early returns to reduce indentation, minimal but pointed comments, and no superlatives or praise from the LLM.

debloat.dev is a community-driven directory of open-source replacements for bloated vendor software, organized by hardware category (peripherals, networking, smart home, NAS, etc.). Anyone can post listings without an account, and each entry shows what proprietary tool it replaces, its license, user rating, and a forum thread. Top entries include Immich (Google Photos), Syncthing (cloud sync), Home Assistant (smart home), OpenWrt (router firmware), Jellyfin (Plex), and Frigate (Ring/Nest NVR).

An independent LLM leaderboard ('Ed-o-meter') tested 17 models on 28 real-world tasks with identical prompts and deterministic grading. GLM-5.3 (open-weight) achieved 100% pass rate, a 9.3 rubric score, and $0.28 per full lap—roughly one-fifth of GPT-5.5's cost—though with a 16.3s TTFT versus GPT-5.5's 13.2s. The full suite costs ~$30 to run, and the author flags caveats including single-trial wide confidence intervals and self-judge bias for fable-5's rubric score.

Waymo revealed a custom 5nm ASIC chip for its sixth-generation self-driving system in the Ojai robotaxi, now open to all riders in Los Angeles, Phoenix, and San Francisco. The chip processes raw sensor data from 13 high-fidelity cameras and delivers over 1,000 TOPS, putting it in the same performance range as Nvidia's DRIVE AGX Thor automotive processor.

Flock Safety CEO Garrett Langley is publicly calling for a 'compromise' between privacy and safety as the surveillance company faces bipartisan backlash over its cameras, drones, and license plate recognition tech. The Washington Post identified 46 cases where police officers allegedly used Flock technology for unauthorized purposes including stalking, and both Democratic and Republican politicians are now pushing legislation to restrict or ban such systems.

Richard I. Cook's 1998 treatise lays out principles of how complex systems fail, arguing that all interesting systems are intrinsically hazardous, heavily defended, and run in degraded mode with latent flaws. Catastrophe requires multiple small failures to combine — single-point failures are never sufficient on their own. The system continues functioning because of redundancies and human workarounds, not because it is flawless.

Judge William Alsup ruled that Anthropic's AI training on copyrighted books was lawful, comparing LLM ingestion to a writer studying literature, but still ordered a $1.5 billion penalty because Anthropic pirated the books from illegal shadow libraries. Attorney Cathy Gellis notes the ruling is effectively good news for AI companies, since the fine is small relative to projected revenue and the core legal question—whether training constitutes copying—was answered in AI companies' favor.

Sony's mid-range Xperia 10 VIII design leaked ahead of a 25 August 2026 launch event, showing minimal changes from the Xperia 10 VII — same flat slab design, horizontal camera bar, and reportedly the same Snapdragon 6 Gen 3 with 8GB RAM as last year's model. The previous model launched at RM2,199 in November 2025.

A CNBC survey found 53% of Americans worry AI will displace someone in their household, even though most employers who cut jobs for AI in the past year have backtracked. The article argues companies building trust around AI adoption should let individual teams drive their own AI roadmaps rather than imposing top-down mandates.

Slovakia's national security service NBU issued an alert against NERO R-ONE traffic cameras after discovering a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are rebranded CORDON PRO.M units from a St. Petersburg firm, purchased under a €30 million EU-funded project with 279 units slated for deployment. Beyond the backdoor, the devices ship with SecureBoot disabled, vulnerable web management portals, and unauthenticated live stream access.

China has delayed a critical Moon launch to 2027, citing the need for 'absolute success,' according to Ars Technica. The provided article text contains only cookie consent boilerplate, not the actual article content.

An explainer post uses the analogy of a climbing harness to define an 'agent harness' — the software layer that wraps an AI model to turn it into a usable agent. It breaks down four core harness functions (system prompt, tool descriptions, environment, and interface) and names specific harnesses like Pi (Terminal-based), OpenClaw (iMessage/chat/email), and Lefos (email-first).

An author with 20 years in tech and an InfoSec background spent $266.15 across four AI models to root an Amazon Fire HD 10 (11th gen, 2021) that had no published root method because Amazon fused the bootrom shut. Claude spent five months on diagnosis before its safeguards cut him off; Kimi K3 (Moonshot AI, released July) found the exploit for $164.25, GLM-5.2 caught fatal bugs for $21.90, and GLM-5.3 finished the job in one day on an $80 subscription. The author notes the most sophisticated technique he used was prompting an LLM.

Tom's Hardware highlights a deal on the Asus Prime Radeon RX 9070 OC, a 16GB gaming GPU, priced at $629.99 — a $120 discount — positioned for 1440p and 4K gaming.

The article URL returned a 403 Forbidden error with only a Cloudflare bot verification page visible. No actual content about the claimed nonfiction books on cults, scams, and schemes was accessible.

Cursor principal systems engineer Vicent Martí detailed how Cursor built its own Git repository service called Origin, powered by an internal engine called Continuity, using S3 object storage as the source of truth and local NVMe repositories for latency-sensitive operations. The approach addresses Git's fundamental scalability problem—servers must traverse the entire commit DAG to assemble packfiles for fetches and clones—which GitHub's Spokes architecture (three synchronized NVMe replicas) only partially solves and worsens as replica count grows. A beta of Origin is available with paid Cursor plans.

At BAGFest 2026, Hasnul Hadi Samsudin (Head of PlayStation Studios Malaysia) advised Sarawak to build its own gaming ecosystem rooted in Borneo culture—citing the Borneo Cultures Museum as a potential creative anchor—rather than replicating Kuala Lumpur's model. Panelists from MDEC, Virtuos Games Malaysia, and Larian Studios Malaysia noted Malaysian visual arts talent is world-class but programming remains a weak area, and that talent flourishes when given opportunity and the right environment.

The US Army tested a self-driving Ford F-250 truck equipped with a shotgun-turret system designed to autonomously shoot down fast-moving drones at ranges of 10 to 100 meters. The article text provided is almost entirely Tom's Hardware website boilerplate with no additional technical detail beyond the headline.

Nvidia has reportedly warned its largest customers of a 15% price increase on AI servers, driven by rising memory costs. The article provides no further technical detail beyond the headline and site navigation boilerplate.

Kaspersky discovered the first documented Android malware targeting automotive head units, spread through the devices' built-in firmware updaters. The multi-stage downloader (attributed to MoYu Group, linked to the BADBOX botnet) creates a proxy botnet and performs ad fraud, installing as a UI-less app that users wouldn't notice. The infection chain is specific to Android-based car head units and was found in June 2026.

Nvidia's GB300-powered DGX Station, a desktop tower for enterprise AI workloads, has been listed online for nearly $100,000. The listing makes the workstation purchasable by individuals or organizations with sufficient budget, rather than restricted to select enterprise customers.

A small UK power plant was shut down for four days in July following a cyberattack attributed to Iran-linked hackers, The Telegraph reported. The UK government confirmed a small-scale energy generator was impacted but said there was no risk to the wider energy system, and declined to formally attribute blame. The incident coincided with US FBI and CISA warnings about Iranian cyber actors targeting water facilities across at least seven US states.

A fake GTA VI ISO file circulating online after a recent leak is reportedly a 113GB padded malware file — 99.99% empty zeroes with a 50KB virus embedded. Testers and internet sleuths identified the download as a social engineering trap targeting people seeking pirated game content.

Microsoft engineer Raymond Chen recounted how the original 1990 Microsoft Entertainment Pack for Windows boxes were printed before Tetris licensing was finalized, so a sticker was added once the deal closed, making the stickered versions rare collectibles. He also noted that early Windows 95 anti-piracy holograms featured a shirtless child, later replaced with a clothed version, making the original a collector's item.