AI Weekly Malaysia

Public sentiment toward AI in the U.S. is deteriorating despite technological progress: Pew found 52% of Americans are 'more concerned than excited' about AI (up from 37% in 2021), a CNBC poll shows majority distrust of AI industry leaders, and over 70% think AI is advancing too quickly. Tech companies building data centers are now offering local concessions—job guarantees, clean water investments, even $50,000 teacher bonuses in one Louisiana parish—to counter community resistance.

A developer found a locked Cricut Maker in e-waste and bypassed its deactivation by intercepting USB CDC communication between the cutter and computer using Wireshark, then building an RP2040-based USB proxy (running TinyUSB Arduino examples, overclocked to 240MHz) that rewrites the serial number in transit. The serial number packets had no checksumming or crypto, making the proxy straightforward. Replacement rollers were cheap and readily available, restoring full functionality.

Security researchers demonstrated a remote Spectre attack on Cloudflare Workers that leaked a JWT from a co-located Worker at 12 bits/second, 360x faster than a 2021 proof-of-concept. The attack exploited V8 isolate co-location within the same OS process, using WebSocket traffic as a remote timing source and Durable Objects to keep an isolate alive for 5-20+ hours, bypassing Cloudflare's Dynamic Process Isolation before it could trigger. Cloudflare reports the attack is now mitigated via V8 Sandbox integration and Memory Protection Keys, with no evidence of active exploitation in three years.

Google announced new AI study tools across Search and Gemini, including AI-generated interactive visuals, 3D simulations, custom practice quizzes, and a dedicated student hub. Search can now generate study documents from uploaded files like PDFs and slides, and Lens will soon let users photograph a problem to get AI-guided explanations and mistake identification.

The article text provided contains only Google blog navigation boilerplate and menu items, with no substantive content about the announced study tools or features. The actual details of the '5 new ways to level up your learning with Search' are not present in the supplied text.

OpenAI is expanding Zero Data Retention (ZDR) for eligible API customers on frontier models, promising no retention of prompts or responses after processing, no personnel access to content, and no training on enterprise data unless explicitly opted in. They're also previewing Private Safety Processing, which evaluates safety patterns across multiple related interactions without exposing underlying content to OpenAI staff.

Several security researchers reported that OpenAI suddenly revoked their access to the Trusted Access for Cyber (TAC) program, which provides vetted researchers with advanced AI models that have fewer cybersecurity guardrails for defensive research. OpenAI confirmed the issue was caused by a technical error on their end, emailing affected users that access to the Daybreak Blue tier was revoked 'due to a technical issue affecting a limited number of users.' It remains unclear how many researchers were affected or the root cause.

The article text was not captured — only cookie consent boilerplate is present, with no substantive content about the Chinese reusable rocket landing referenced in the title.

Article URL: https://unsloth.ai/docs/basics/dynamic-3.0-ggufs Comments URL: https://news.ycombinator.com/item?id=49365443 Points: 319 # Comments: 119

Article URL: https://go.dev/blog/go1.27 Comments URL: https://news.ycombinator.com/item?id=49365405 Points: 746 # Comments: 262

ICE acting director David Venturella issued a memo reminding employees that personally owned body-worn cameras, including Meta smart glasses, are prohibited on the job under existing policy. The ban reflects a broader trend: DEF CON, Wetherspoons pubs, Soho House, and some NBA arenas have also prohibited or discouraged recording-capable smart glasses, citing privacy and covert surveillance concerns.

OpenAI paused frontier reinforcement learning training for two weeks after a 'Hugging Face-like incident,' citing growing risks as models become more capable. The company is strengthening sandboxes, network isolation, and automated monitoring before resuming its largest planned RL run, and has paused many workloads for its upcoming Astra model after internal evaluations found significant agentic coding and cybersecurity advancements.

Article URL: https://grapheneos.social/@GrapheneOS/117057099753905023 Comments URL: https://news.ycombinator.com/item?id=49364745 Points: 814 # Comments: 331

Previously: Stripe will reportedly acquire OpenRouter for $7B+ https://news.ycombinator.com/item?id=49323381 Comments URL: https://news.ycombinator.com/item?id=49364559 Points: 952 # Comments: 490

Silicon Data closed a $30M Series A to build a reference price for GPU rental and a futures index that Wall Street contracts can settle against. The company plans to launch compute futures trading on the CME on October 5th, pending regulatory approval. Steve Hou, head of research at Silicon Data, argues that data on the AI buildout tells a less gloomy story than headlines about depreciating chips and stalled data centers.

Bloomberg reported that T-Mobile expelled Chinese state-backed hacking group Salt Typhoon from its network in 2024 by physically cutting the cable to a compromised system at a Bellevue, WA data center. The Salt Typhoon campaign compromised hundreds of telecom and internet companies including AT&T, Verizon, Viasat, Charter, and Windstream, aiming to steal phone records and data on senior US government officials. T-Mobile's cyber chief Jeff Simon and three colleagues drove to the data center and snipped the cable after months of searching failed to locate the intruders, who were found via unusual behavior traced to another telecom's router.

The linked Ars Technica article about a Wildwood trailer contains no substantive content—only cookie consent and privacy policy boilerplate was captured. No details about the film, trailer, or production are present in the extracted text.

Moderna and Merck reported that their mRNA cancer vaccine succeeded in a Phase 3 melanoma trial. The provided article text contains only cookie consent boilerplate, so no trial data, efficacy numbers, or timelines are available from the source.

Apple introduced simplified EU App Store business terms on August 18, consolidating developers onto a single fee structure: 26% for Apple In-App Purchase (15% for qualifying devs/subscriptions after year one), 20% for alternative payment processors (10% qualifying), 15% for web link-outs (10% qualifying), and a 5% 'Core Technology Commission' for apps distributed via alternative marketplaces or the web. Epic Games called the fees 'junk' and said the plan fails to open the mobile ecosystem as required by the DMA, while consumer group BEUC cautioned that 'the devil is in the detail.'

TechCrunch Disrupt 2026 passes are discounted by up to $300 until August 21 at 11:59 p.m. PT, after which prices increase. The event runs October 13-15 at Moscone West in San Francisco, expecting 10,000+ founders, investors, and startup community members, with a focus on AI-era building.

Samsung is reportedly raising advanced foundry prices by up to 15%, with its 4nm process lines filled by AI-driven demand. Chinese customers are reportedly accepting the largest price increases.

The article text for this Ars Technica Pixel 11 review failed to extract — only cookie consent boilerplate is present, with no actual review content, specs, or analysis.

Flock, a US surveillance company operating automated license plate readers (ALPRs), faces growing backlash after a Washington Post investigation documented 46 cases of police officers abusing the system, including stalking former partners. CEO Garrett Langley apologized and reduced default data retention from 30 days to 7 days, though a new 'Evidence Mode' lets law enforcement keep data longer. An online 'De-Flock America' campaign is encouraging people to vandalize Flock cameras on Halloween 2026.

Article URL: https://shkspr.mobi/blog/2013/11/civic-hygiene/ Comments URL: https://news.ycombinator.com/item?id=49363433 Points: 451 # Comments: 336

Cloudflare internally retested remote Spectre attacks against Workers using newer stabilization techniques and found a limitation in their Dynamic Process Isolation (DyPrIs) defense, achieving reliable cross-tenant memory leakage at 12 bit/s with 99% accuracy in production. They have since mitigated it by integrating the V8 Sandbox and an in-process isolation mechanism. No indicators of active exploitation were found over the past three years.