AI Weekly Malaysia

Neufangled Robotics is selling Stringman, an open-source room-scale cable-driven gripper robot for $795, using four ceiling-anchored motors in rooms 3–10 m diagonal and 2.3–4 m high. It lists about 1.9 kg average payload net of a 638 g gripper at a 28 N line tension limit, ~0.4 m/s traverse, local/air-gapped Wi-Fi control, published CAD/PCBs/software, and a Python API plus MCP server for agent workflows.

IBM Research's Palette fine-tunes a 20B open-weight model to generate slide decks in the IBM Design Language by splitting the job the way humans do: a planner stage decides the story and per-slide content, and a coder stage writes the x/y/width/font-size code for each slide. Training data was synthesized rather than scraped from finished decks, and the model is wrapped in a harness that renders the output and checks it. On PresentBench it ranks first on two of the three domains the team measured; the post does not state that weights, code, or the benchmark are publicly released.

Google will make AI tools opt-in for K-12 students next year across Gemini, NotebookLM, Gemini in Classroom, and Google Search. Schools that disable AI entirely will lose Google Search because AI is now integrated into it; Google education VP Chris Phillips said students will see a school message saying search is unavailable. The change was announced alongside Guided Learning.

Simon Willison reproduced an example from the paper "Sparks of Weight-Space Programming" (Rikiya Takehi, Jayden Teoh, Alex Zhang, Omar Khattab) using Qwen 3.8 27B running on his own laptop, showing a local model can inspect raw model weights — a text dump of floating point numbers — without tools. The paper's headline claims are about GPT-6 Astra: writing small game-playing networks from scratch that beat PPO-trained nets, and fixing Qwen3.5-0.8B's reasoning loops by editing 0.016% of weights, lifting MATH-500 from 7.9% to 48.1% and tripling IFEval. Willison deliberately splits the two questions, and notes Matthew Honnibal called the paper misleading for conflating no-tools weight reading with code-assisted model editing, while Sean Goedecke deconstructed the Qwen3.5-0.8B example as steps a human ML researcher would take.

New York City Mayor Zohran Mamdani told Wired that surveillance technologies are "indicative of much that is wrong in our country today," backing two pieces of City Council legislation introduced by Shahana Hanif that would ban collection of biometric data such as facial recognition in public places across the city. The comments follow Wired reporting on how Madison Square Garden owner James Dolan uses face-scanning cameras to track people inside and outside his venues, including a database that tagged some visitors, among them celebrity performers, as "LGBTQIA." MSG spokesperson Mikyl Cordova called Wired's reporting "inaccurate and false" and said the company is pursuing legal remedies, without providing evidence; New York City has required businesses to disclose biometric data collection since 2021.

Ars Technica's headline and dek report a UEFI bootkit named BlackX that infected Windows machines even though they were fully patched, exploiting what the dek calls Microsoft's lack of clarity around Secure Boot protections. The published body text available here is only page navigation, so there are no details on affected hardware, Windows versions, the infection vector, or Microsoft's response. The piece is by Dan Goodin and carried 14 comments at publication on 3 November 2026.

The Hacker News headline reports that Barracuda flaws could be chained — one bypassing authorization, another escalating to root. The supplied text, however, is almost entirely site navigation and boilerplate: no CVE IDs, no affected product or version list, no CVSS score, no exploitation-in-the-wild status, and no patch version are present. The only concrete claims available are the headline's two-part chain: auth bypass plus root access.

Tom's Hardware reports that OpenAI has introduced a 'Grid Protectors Program' aimed at reducing AI data center energy demand during peak hours, and is testing the system in Georgia. The article text available here is almost entirely site navigation and subscription prompts — it contains no figures on how much load is shifted, which facilities are involved, what the program actually does technically, or when it starts.

The Hacker News headline (3 Nov 2026) reports that Google is warning about 'LLMjacking' attacks, where abused LLM API access has driven cloud bills for some enterprises up to $1 million. The article body available here is only site navigation and boilerplate — no attack vector, affected services, mitigation guidance, or named cases are included, so the $1 million figure and Google's attribution are the only substantive details.

The supplied text contains no article body — only the headline ('Trump wanted to give No Kings no air. Then, Meta suspended its Instagram.'), the byline (Ashley Belanger, Ars Technica, Nov 3, 2026, 10:39am), a comment count of 50, and photo captions of Mark Zuckerberg (Menlo Park, Sept 23, 2026) and Donald Trump (Fort Myers, Oct 23, 2026). The headline asserts that Meta suspended an Instagram account tied to 'No Kings' and frames it against Trump's stated intent to deny the movement airtime, but no dates, mechanisms, policy citations, or Meta statement are present in the text to confirm or detail that. Nothing in the excerpt covers AI/ML, developer tooling, or Malaysian/Southeast Asian impact.

Apple told developers on Monday that App Store rules will require an 18+ age rating for any app offering dating or romantic-relationship features, and from November 16 developers must add new content descriptors so ratings reflect those features. The policy explicitly reaches AI companion apps — Character.AI, Replika and similar — where romantic or sexual chat may be only one feature, and it also requires apps to disclose when they share a user's real-world location with another person or group. Apple framed it as part of its global age-assurance and child-safety rollout; TechCrunch notes top AI companion apps had 220 million downloads across the App Store and Google Play as of last summer, and that Brazil offers a government rating route via its Ministry of Justice for family location-sharing apps.

A New York Times report dated 3 November 2026, as headlined on Hacker News, claims Google will turn off Search for schools that reject AI. The article text was not accessible — only the headline, an archive link, and a pointer to a blog.google education post were available — so the specific mechanism, which schools, and what "reject AI" means are unverified. The Hacker News thread drew 264 points and 220 comments, so builders are engaged even without confirmed details.

Intel has released version 0.9 of the process design kit (PDK) for its 14A node, with PDK 1.0 — the production-grade release — planned for Q1 2027. That is the entire substance of the piece: the Tom's Hardware text is mostly paywall and newsletter boilerplate, with no figures on performance, density, wafer pricing, or which customers have signed on.

The Hacker News reports that the update channel for cPGuard was hijacked and used to backdoor Linux servers and collect password hashes. The item is dated 3 November 2026. The excerpt available here contains only the headline and site navigation, so the specific affected versions, distribution mechanism, indicators of compromise, and vendor response are not stated in the supplied text.

Tom's Hardware reports that xAI has installed eight converted jet engines to generate power for its Mississippi data center, and that the site's permits allow a pollutant limit 25 percent higher than the standard, with concerns raised about carbon monoxide emissions. The supplied text is almost entirely site navigation and subscription boilerplate, so it contains no figures on megawatts generated, fuel type, engine models, permit dates, or regulator names.

Namespace describes running racks of MacBook Pros in a datacenter because Mac Minis ordered in January 2026 arrived in July, and Apple's staggered M5/M6 rollout left the Mini behind. Each laptop gets an IP KVM, a 10G Ethernet NIC, and custom heat-guiding holders, with four cables per laptop and 48 per shelf; the goal is to spin up macOS instances in seconds and ship new Xcode versions hours after Apple releases them.

A Hacker News thread (366 points, ~110 comments) reports that the 'Improve the model for everyone' data-sharing toggle in OpenAI Codex was found silently re-enabled for users who had previously turned it off. One commenter states they had two prior, granted requests to disable training and found the setting on again, and the poster links an earlier HN thread where the same behaviour was noted. The setting is checkable at chatgpt.com/settings/data-controls, with a second control at privacy.openai.com; the reports are anecdotal and OpenAI has not responded in the text.

Ars Technica republished an Inside Climate News piece by Georgina Gustin (Nov 3, 2026) reporting that the EPA is effectively abandoning Clean Air Act enforcement at factory farms, with critics calling it a retreat from policing agricultural air pollution. The article carries 35 comments. The excerpt supplied here is truncated before any rule text, dates, thresholds, or named officials, so the specific mechanism of the change is not in the source text.

Lenny Rachitsky published the sixth annual Lenny's Newsletter holiday gift guide, a paid post with 100+ gift ideas curated with his wife Michelle, explicitly stating there are no affiliate links and that he is an investor in only two of the featured companies. Named items in the visible excerpt include a $30 'Be Nice' cap by artist David Shrigley (with a note about EU tariffs), Dandelion Chocolate from San Francisco, an e-ink 'Avian Visitors' bird display sold as a one-man hobby kit, and an 'Applause Machine' desk toy aimed at PMs. The only builder-relevant line is a promo: Insider subscribers get a free year of Cursor, Notion, Replit, Lovable, Wispr Flow, Linear, ElevenLabs, Factory, PostHog, Granola, Brain.fm and Waking Up, while supplies last.

On Monday Nov 2, 2026, refrigerators and freezers in supermarkets across Belgium, Luxembourg and Sweden were remotely manipulated to raise temperatures — one store hit 50°C (122°F) — forcing food to be discarded. Ahold Delhaize said dozens of Delhaize stores in Belgium and Luxembourg were affected and that operations have returned to normal; Colruyt reported five Spar stores hit, Carrefour 15 Belgian stores, and Intermarché was also listed. CNBC notes this is the second such attack on European supermarkets in a month, but the excerpt does not describe the technical vector or who was behind it.

This is a TechCrunch promotional post for its Founder Summit 2026, held November 4 at SoWa Power Station in Boston, with discounted passes and a buy-one-get-one-free ticket offer. It lists session themes — distribution as competitive advantage (Hunter Worland, NEA), fundraising trends (Kristen Craft, Fidelity Private Shares), and pitch quality (Dave Balter, True Ventures/Edisyl) — across a Build Stage and an Impact Stage. No product, pricing, funding figure, or technical detail beyond the event agenda is disclosed.

Tom's Hardware reports that Apple is facing "unprecedented memory cost increases" as RAM prices keep surging, with its manufacturing bill climbing by $33 billion and rising component expenses threatening margins through the holiday quarter and into 2027. The text available is almost entirely site navigation and subscription prompts, so it contains no DRAM contract-price figures, no breakdown of which Apple products are affected, and no sourcing for the $33 billion number.

Tom's Hardware published a hands-on piece on the DockCase Mount Ling 2 Pro, a handheld-console dock that the title describes as having a built-in capture card and a slot supporting up to 4TB of NVMe storage. The supplied text is almost entirely site navigation, membership prompts, and newsletter boilerplate, so no price, port layout, capture resolution/frame rate, transfer speeds, thermals, or test results are actually available.

Ars Technica reports Mercedes-Benz is developing a holographic heads-up display that projects information across the windshield, positioned as a successor to the passenger-screen approach Mercedes pioneered. The article notes the demo unit was fitted to a right-hand-drive car (so the photo shows the passenger's view) and the piece carries 33 comments. The excerpt available here is truncated and does not include resolution, field of view, price, production dates, or which models will get it.

Cloudflare launched Zero Wire inside Cloudflare Radar, a public feed of briefings on critical Internet-facing software vulnerabilities. Each briefing includes a plain-language explanation, who should investigate, recommended actions, links to vendor guidance, and a pre-compiled prompt for use with an agent to assess infrastructure impact. It focuses on critical CVEs in web apps, runtimes and libraries, and exposed services rather than cataloging every CVE.