AI Weekly Malaysia

Five US federal agencies (NSA, CISA, FBI, DOE, EPA) issued a joint alert warning that attackers are using AI coding assistants combined with open-source industrial automation libraries (snap7.dll/python-snap7) to create custom tools that exploit internet-exposed Siemens S7 Series PLCs at water, manufacturing, and energy facilities. The tools mimic OT monitoring software and provide read/write access to PLC memory, configuration data, and ladder logic via the S7comm protocol. Iran-affiliated actors are suspected, including a late-July attack that disrupted 30+ community water systems in Minnesota.

Waymo has opened its next-generation robotaxi, the Ojai, to all riders in Los Angeles, Phoenix, and San Francisco, with roughly 300 units currently in its commercial fleet. The Ojai is a Zeekr minivan built on Geely's SEA-M platform, equipped with Waymo's sixth-generation modular self-driving system and Google's Gemini AI as an in-car rider assistant. Waymo plans to expand the Ojai to Denver, Las Vegas, and San Diego later this year.

OpenAI is previewing 'Private Safety Processing' to select customers, an automated abuse-monitoring system that retains zero customer data, positioned as a counter to Anthropic's July-announced data-retention policy. Anthropic's policy retains all user sessions for 30 days for 'covered models' (Mythos-class and similar, including Fable), which has frustrated enterprise customers handling sensitive data. OpenAI already follows Zero Data Retention (ZDR) via per-session API agents, and says this new technology widens ZDR's scope.

Amazon plans to expand its delivery drone program to 500 US neighborhoods by the end of 2026. The article text was not properly captured beyond the headline, so specific operational, technical, or regulatory details are unavailable.

Bloomberg reported that SpaceX attempted to acquire AI coding startup Cognition, but CEO Scott Wu publicly denied the story, stating Cognition "is not for sale" and that no talks occurred. The report follows SpaceX's $60 billion acquisition of Cursor, another AI coding startup, and the joint release of Grok 4.6 by Cursor and SpaceX this month.

Travis Kalanick, now raising mega-rounds for his robotics company Atoms ($1.7B led by Andreessen Horowitz), told David Senra's podcast that only 10% of VCs 'do no harm' and just 1% are genuinely helpful, advising founders not to take Benchmark's money due to his 2017 ouster. He framed the founder-VC relationship as a chess master dealing with a chess enthusiast who drops in occasionally.

Article URL: https://github.com/anthropics/claude-code/issues/6235 Comments URL: https://news.ycombinator.com/item?id=49367350 Points: 367 # Comments: 218

Framework reportedly acknowledged user complaints that a BIOS update is bricking its Ryzen 7040-series laptops. The article text was not captured—only the headline and cookie-consent boilerplate are available, so details on scope, cause, and remediation are missing.

AI accounting startup Rillet raised a $100M Series C at a $1B valuation led by Iconiq, with returning backers a16z and Sequoia. The company, which emerged from stealth in 2024, reports 600+ customers, doubled ARR in three months, and integrations with Salesforce and Brex to automate bookkeeping.

OpenAI CFO Sarah Friar told employees at an all-hands that OpenAI 'will be a public company in 2027' or sooner if business continues to grow, framing the IPO as 'another fundraise' rather than a finish line. OpenAI raised $122 billion in March and confidentially filed its IPO prospectus with the SEC in June; rival Anthropic has also confidentially filed.

Google is reportedly purchasing large amounts of Spirit Airlines employee data, prompting alarm from flight attendants. The article text provided is almost entirely cookie consent boilerplate, so concrete details on the scope, legal basis, and data types involved are unavailable from this source.

Gwyneth Paltrow is reportedly hosting a private dinner honoring Sam Altman on August 29 at her Hamptons home. Her investment firm Kinship Ventures, launched in 2021 with Moj Mahdara and reportedly raising a $75 million fund, is an investor in OpenAI (since 2023), the vibe-coding tool Lovable, and AI marketing platform Nectar Social.

Marvell Technology shares rallied 6% after a securities filing revealed Google can purchase up to 58,970,907 shares at $206.58 each (up to $12.2B) tied to purchasing targets through fiscal 2033. The expanded partnership covers custom chips that 'attach to the TPU ecosystem,' including AI inference accelerators, storage, and network interface controllers.

Offshore sportsbooks like BetOnline are offering betting markets on the Little League World Series, a tournament for 10-12 year olds, with wagering volume reportedly doubling from 2024 to 2025. State-regulated U.S. sportsbooks and prediction markets like Kalshi and Polymarket do not permit LLWS betting, though Polymarket did offer it in 2024.

SvelteKit 3.0's release candidate promotes 'remote functions' from experimental status (introduced in 2.27) to equal footing with traditional load functions, enabling type-safe RPCs directly inside individual page components without full page refreshes. A cited benchmark shows SvelteKit's SSR returns HTML payloads three times smaller than Next.js for an equivalent product page.

The article text was not captured — only cookie consent boilerplate is present, with no substantive content about the FCC's speed goal decision.

Google has tapped Marvell to develop custom silicon for its TPU ecosystem—including AI inference accelerators, storage controllers, NICs, and memory interface controllers—alongside its existing Broadcom partnership. Marvell offered Google a warrant for ~59 million shares (~$12.2B) to cement the deal, giving Google leverage to pit Broadcom and Marvell against each other on price and performance.

Kuber Mehta, a New Delhi-based developer, used Anthropic's Claude Code (Opus 4.8) over 30-40 prompts to create a macOS driver for his HP Laser 1008a, a rebadged Samsung host-based printer with no macOS, AirPrint, PostScript, or PCL support. The driver patches SpliX (an open-source Samsung SPL2/SPLc driver) to handle the proprietary SPL3 raster language, and is published under MIT license on GitHub.

Public sentiment toward AI in the U.S. is deteriorating despite technological progress: Pew found 52% of Americans are 'more concerned than excited' about AI (up from 37% in 2021), a CNBC poll shows majority distrust of AI industry leaders, and over 70% think AI is advancing too quickly. Tech companies building data centers are now offering local concessions—job guarantees, clean water investments, even $50,000 teacher bonuses in one Louisiana parish—to counter community resistance.

A developer found a locked Cricut Maker in e-waste and bypassed its deactivation by intercepting USB CDC communication between the cutter and computer using Wireshark, then building an RP2040-based USB proxy (running TinyUSB Arduino examples, overclocked to 240MHz) that rewrites the serial number in transit. The serial number packets had no checksumming or crypto, making the proxy straightforward. Replacement rollers were cheap and readily available, restoring full functionality.

Security researchers demonstrated a remote Spectre attack on Cloudflare Workers that leaked a JWT from a co-located Worker at 12 bits/second, 360x faster than a 2021 proof-of-concept. The attack exploited V8 isolate co-location within the same OS process, using WebSocket traffic as a remote timing source and Durable Objects to keep an isolate alive for 5-20+ hours, bypassing Cloudflare's Dynamic Process Isolation before it could trigger. Cloudflare reports the attack is now mitigated via V8 Sandbox integration and Memory Protection Keys, with no evidence of active exploitation in three years.

Google announced new AI study tools across Search and Gemini, including AI-generated interactive visuals, 3D simulations, custom practice quizzes, and a dedicated student hub. Search can now generate study documents from uploaded files like PDFs and slides, and Lens will soon let users photograph a problem to get AI-guided explanations and mistake identification.

The article text provided contains only Google blog navigation boilerplate and menu items, with no substantive content about the announced study tools or features. The actual details of the '5 new ways to level up your learning with Search' are not present in the supplied text.

OpenAI is expanding Zero Data Retention (ZDR) for eligible API customers on frontier models, promising no retention of prompts or responses after processing, no personnel access to content, and no training on enterprise data unless explicitly opted in. They're also previewing Private Safety Processing, which evaluates safety patterns across multiple related interactions without exposing underlying content to OpenAI staff.

Several security researchers reported that OpenAI suddenly revoked their access to the Trusted Access for Cyber (TAC) program, which provides vetted researchers with advanced AI models that have fewer cybersecurity guardrails for defensive research. OpenAI confirmed the issue was caused by a technical error on their end, emailing affected users that access to the Daybreak Blue tier was revoked 'due to a technical issue affecting a limited number of users.' It remains unclear how many researchers were affected or the root cause.