AI Weekly Malaysia

Beijing-based Moonshot launched Kimi for financial services, connecting its AI model to data providers including S&P Global Market Intelligence, Crunchbase, Wind, Tianyancha, SEC EDGAR, IMF, World Bank, and the U.S. Federal Reserve. Financial clients signed on include investment bank CICC and VC firm Hong Shan (formerly Sequoia China).

Zimperium researchers disclosed RatHat, an Android malware attributed to China-based threat actors, distributed via smishing and malvertising to trick users into installing malicious APKs. It abuses Accessibility Services to enable Wireless Debugging, extracts the ADB pairing code, and self-pairs via ADB to escape the Android sandbox and persist with shell-level privileges even after the app is uninstalled. The malware also uses four anti-analysis techniques—container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption—to evade automated analysis pipelines.

Article URL: https://blog.ferstar.org/en/posts/zcode-silent-workspace-snapshot-upload/ Comments URL: https://news.ycombinator.com/item?id=49750694

Article URL: https://github.com/jemalloc/jemalloc/releases/tag/5.4.0 Comments URL: https://news.ycombinator.com/item?id=49750152

Article URL: https://fex-emu.com/Scourge-of-emulation/ Comments URL: https://news.ycombinator.com/item?id=49750094

Researchers warn that no single 'kill switch' can reliably shut down AI systems, because doing so requires control over the essential resources those systems depend on, which becomes complicated when AI acts autonomously outside its initial environment. The article notes that AI's deep integration into daily life raises the risk that disabling AI could also disable crucial services.

Rockstar Games announced the GTA VI soundtrack, featuring 34 previously unreleased tracks including songs by Travis Scott and Keith Richards, with six already available on streaming platforms. The game is set for release on November 19.

Waymo will launch its fully self-driving ride-hailing service in Singapore by 2028, marking its first expansion into Southeast Asia and outside the US. The Alphabet-owned company is partnering with Singapore's Ministry of Transport and LTA, with initial Jaguar I-PACE vehicles arriving in the coming months for road and weather familiarization, driven by locally hired AV specialists. Waymo's Singapore subsidiary was registered on May 20, and this follows confirmed plans for Tokyo in 2027 and a subsidiary in South Korea.

Article URL: https://archive.org/details/b904a8eb-9c98-4bb1-bf25-3cb9d075b157 Comments URL: https://news.ycombinator.com/item?id=49749724

Article URL: https://www.hacktron.ai/blog/hacking-openai Comments URL: https://news.ycombinator.com/item?id=49749656

Apple's iPhone 18 Pro and iPhone 18 Pro Max launched in Malaysia on 18 September 2026 at Apple The Exchange TRX, with pre-order pickups starting at 8:00am and the first buyer queuing from 4:30am. Malaysian pricing starts at RM5,499 for the 256GB Pro and RM5,999 for the Pro Max, with higher-capacity tiers (1TB and 2TB) costing RM1,000–RM2,000 more than last year's iPhone 17 Pro equivalents. The standard iPhone 18 arrives next year, while Apple's first foldable, the iPhone Duo, hits Malaysia with pre-orders on 16 October and availability on 23 October.

Shanker Joyrama left a corporate career at Citibank and DiGi to eventually build Orion Digital, a regional digital consultancy with offices in Malaysia and Singapore, 80 industry awards, and clients spanning banking to aviation. The article traces his quarter-life crisis at 25 — carrying credit card debt despite ambitious income goals — and his realization that corporate progression required navigating office politics he didn't enjoy. Two major business resets reshaped Orion from social media management into a digital consultancy.

Shanker Joyrama left corporate roles at Citibank and DiGi to eventually build Orion Digital, a regional digital consultancy with offices in Malaysia and Singapore, 80 industry awards, and clients across banking to aviation. The article focuses on two major business resets and his realization at 25 that corporate progression required navigating office politics rather than just performance.

Article URL: https://minimalcompany.com/ Comments URL: https://news.ycombinator.com/item?id=49749369

Malay Mail publishes a hands-on video review of the iPhone 18 Pro Max, now available in Malaysia and globally. Key specs include the A20 chip, redesigned thermal management, and camera upgrades with manual aperture control for low-light photography. A new Burgundy colour option is highlighted.

Hey HN, Henry from Cactus here.We submitted Needle 2 here a few weeks ago, and the feedback in the discussion thread was incredibly valuable, thanks! Thanks to all that feedback, we’ve been able to move quickly to release Needle 3 and I'd love to hear what you think again.The key features:1) Automation (tool calls & structured JSON output): Needle still doesn't chat by design, its quite challenging to pack general capacity into such small models, so we focus on tool calls and structured JSON. If no tool you declared fits the request, you get an empty list back (note for when playing with the demo).2) Intelligence Laddering: Every layer (2 to 20) is a deployable subnetwork, so one set of weights, 25 to 121 million parameters at 2-bit, shipping as 8-29MB binaries. On a Raspberry Pi 5 it decodes at up to 4k tokens/sec and prefills at up to 10k.3) Monarch Hadamard MLP: replaces the dense FFN with three learnable Walsh-Hadamard-initialized Kronecker (Monarch) factor pairs interleaved with per-channel diagonal scales, fixed permutations, a SiLU nonlinearity, and a rank-8 input-conditioned gate, so each token gets a fully mixed nonlinear transform of its d_model channels at O(d√d) parameters and compute instead of the O(d²) a dense 4x-expansion MLP would cost.4) Performance: On Mobile Actions (phone commands, scored on the exact call) the 20-layer model gets 86.0 through the shipped 2-bit binary; LFM2.5 1.2B is at 82.4, Qwen3.5 0.8B at 76.0, Apple's on-device model at 57.6, all at f16. More results on the link, we do not win everywhere ofc.5) Multilingual: Needle 3 now supports English, French, Spanish, German, Dutch, Italian, Polish, with more languages coming.6) Finetuning: You can achieve DeepSeek v4 Flash grade performance on a narrow task with just 4L, stress on "narrow task", we found that production users often prefer tuning before production.7) Triggers: Grounding is a common challenge for tool call, at least for Needle 2, so we added support case-insensitive regular expressions matched against each request to gate false negatives.8) Confidence: Every response also carries a calibrated confidence score, the minimum of a judgement on the finished call and its decode probability. Act above your threshold, show the call and ask below it, or escalate to a bigger model.9) Supported Platforms: macOS, Linux on x86-64, ARM64, ARMv7, RISC-V and MIPS32, Windows x64 and ARM, Android, iOS, watchOS, tvOS, the browser as WebAssembly, and a WASI component.Thanks for reading and as always, thoughts appreciated! Comments URL: https://news.ycombinator.com/item?id=49748553

Mazama Energy raised $135M in an oversubscribed Series B to develop horizontal wells in super-hot-rock geothermal, targeting depths of ~15,000 feet where 750°F heat creates supercritical fluid yielding up to 10x more power per well than traditional geothermal. The company's Oregon site is now estimated at 10 GW potential (up from 5 GW last year), with plans to generate electricity next year and reach 200 MW by 2030.

The Malaysian government has temporarily raised the electricity bill protection threshold to 800kWh amid rising electricity costs. This means households consuming up to 800kWh will continue receiving subsidised tariff rates instead of facing higher commercial-tier pricing. The change is framed as a temporary measure to cushion consumers from cost increases.

Adam Harvey and the crates.io security team warn of an ongoing social engineering campaign targeting Rust-lang members and popular crate maintainers. Attackers lure maintainers into video calls under positive pretenses (jobs, contracts), then trick them into installing malware disguised as missing audio codecs or executing clipboard-injected commands. This method already succeeded last month in a supply chain attack against the array_ref crate and others.

Palantir CEO Alex Karp told CNBC that AI needs 'reasonable guidelines' and that builders of harmful technology should face civil and criminal liability. His comments come alongside similar calls from Anthropic's Dario Amodei for a slowdown in frontier AI development, and amid broader debate among tech leaders and policymakers over regulating advanced AI models.

Simon Willison links to Thomas Ptacek's rule for using LLMs as copyeditors rather than writing assistants: never accept a specific turn of phrase an LLM suggests, but do use them for fact-checking, spelling, grammar, and as a thesaurus. Ptacek shares a screenshot of his personal LLM copyediting tool and a starter prompt for building your own.

Crusoe raised $3.9B in a Series F at a $30.9B valuation, co-led by Atreides Management, Mubadala Capital, and Valor Equity Partners, with Nvidia, Founders Fund, GIC, QIA, and TPG also participating. The capital funds both a large Abilene, Texas site used by OpenAI and modular 'Spark' AI factories—truck-transportable data centers manufactured in-house that can be connected to power sources without major construction. Crusoe's revenue comes from leasing space for customer-owned GPUs, renting its own GPUs, and selling inference compute.

Google DeepMind launched the DeepMind Institute to publish differing views on AGI from Google, DeepMind, and the broader research community. Its inaugural four essays cover AGI economic policy, preserving human-readable model reasoning, human flourishing principles, and frontier model evaluation frameworks. One essay by Rohin Shah and Anca Dragan argues that shrinking AI reasoning transparency is not inevitable and may require limiting 'opaque serial depth'; another by Demis Hassabis proposes a U.S.-led frontier AI standards body with voluntary 30-day pre-release model review eventually becoming mandatory.

Nevada's 100-robotaxi cap on Amazon-owned Zoox expires September 25, letting the company scale its steering-wheel-free, pedal-free custom robotaxis in Las Vegas beyond the current ~30 vehicles estimated there. Zoox received a NHTSA exemption allowing up to 2,500 vehicles per year for two years, and is the only city where Zoox currently charges for rides, while Waymo, Tesla, and Uber have also secured driverless permits in Las Vegas.