AI Weekly Malaysia

Ana Rodrigues writes about her experience at SmashingConf Freiburg and CSS Day, noting that conference speakers increasingly receive little to no feedback now that Twitter is no longer a vibrant space for post-talk discussion. She encourages attendees to approach speakers and tell them what they liked, as many speakers are left wondering whether their talk landed well.

Bruce Schneier and Cindy Cohn argue in a Lawfare essay that post-9/11 mass surveillance—originally justified for counterterrorism—has become a routine law enforcement and private-sector tool, used by ICE for immigration enforcement, against protesters, and in private venues like Madison Square Garden and Flock license plate camera networks. They call for an end to 25 years of dragnet surveillance architecture.

The article argues that most security testing validates individual techniques in isolation (e.g., MITRE ATT&CK technique-by-technique), while real attackers—increasingly AI-powered—chain multiple techniques together, exploiting gaps between disconnected controls. It cites a Filigran report finding 93% of security leaders experienced a business-impacting cyberattack in the past 12 months despite validation programs.

F5 Labs disclosed a mass-scanning campaign observed in August 2026 exploiting CVE-2026-39364 (CVSS 8.2) in Vite, where attackers append query parameters like ?raw, ?import&raw, or ?import&url&inline to /@fs/ requests to bypass server.fs.deny and read sensitive files (.env, certs, AWS/Azure credentials) from dev servers exposed via --host or server.host config. Default Vite binds to localhost, so only misconfigured deployments are affected.

Microsoft issued an emergency update for a September 2026 Windows 11 patch that introduced crashes on AMD graphics systems, Windows Explorer hang-ups, and broken third-party integrations. The original patch reportedly bundled many long-requested features but surfaced fresh bugs requiring immediate fixes.

A CyberPowerPC desktop with an AMD 9800X3D, RTX 5060 Ti 16GB, 32GB DDR5, and 2TB SSD is discounted to $1,859, a $560 saving. The article is a deal alert with no technical analysis or broader industry context.

The UK scrapped its national Digital ID scheme in July 2026 under PM Andy Burnham, but as of September 15, 2026, digital IDs certified under the existing Digital Verification Services (DVS) framework can now be accepted voluntarily by pubs, bars, and shops in England and Wales for age verification when buying alcohol. Third-party providers like Yoti get first access; GOV.UK Wallet and a planned digital driving license remain separate but may eventually serve this purpose too.

Minecraft Legacy has been rewritten in C++ to enable ports for PS2 and Wii, with code specifically tuned to run within the PS2's 32MB RAM constraint. The article body itself is almost entirely Tom's Hardware site navigation boilerplate with no substantive technical detail beyond the headline.

Major rail disruption hit the Netherlands after pipes and cables were deliberately placed on tracks at multiple locations, causing widespread cancellations across Amsterdam, Schiphol, Utrecht, and Eindhoven. ProRail and Dutch police are investigating the incident as intentional sabotage, with services gradually recovering.

Norway's consumer council (Forbrukerrådet) published a report arguing for policy changes to make durable, repairable products the norm again, linking circular economy practices to consumer rights and societal resilience. The report includes policy recommendations for making circular choices easier and safer for consumers.

Wall Street investors are reassessing the AI infrastructure buildout after shares of GE Vernova, Caterpillar, CoreWeave, Oracle, Nebius, Dell, and HPE dropped on concerns that model development at Anthropic and OpenAI could slow. Oracle has spent 18 months laying off staff in slower-growth areas while pouring billions into compute and data centers, and industrial players like GE Vernova, Caterpillar, and Vertiv have invested heavily in energy equipment for AI servers.

A developer built a viral 3D source code visualizer that renders 2.5 million lines of code as a navigable 3D space at over 120 fps, consuming 21GB of RAM. The Tom's Hardware article itself contains no substantive body text beyond the headline and site navigation boilerplate.

Oppo confirmed its Find X10 Pro Max will launch globally with MediaTek's 2nm Dimensity 9600 Pro, featuring a dual-NPU design where a high-performance NPU delivers 51% faster LLM prefill rates and a secondary efficient NPU uses 40% less power for background AI tasks. The chip uses TSMC's N2P process, an All-Big-Core CPU (two C2-Ultra cores at 4.55GHz plus six performance cores), and a G2-Ultra NX GPU with 27% higher graphical performance. The Find X10 series launches in China on 22 September with four models.

AMD's Radeon RX 9070 GRE (12GB, current-generation GPU) is back at $499, below its original MSRP launch price. The article body is almost entirely Tom's Hardware membership boilerplate with no additional technical detail beyond the headline.

PostgreSQL developers removed SQL Property Graph Queries (SQL/PGQ) from version 19 over unresolved bugs, with contributor Tom Lane warning that shipping it would likely lead to post-release bugs unfixable until v20. A fourth beta is scheduled for September 24, with the release date still unconfirmed. Meanwhile, version 19 introduces a REPACK command with a CONCURRENTLY option that lets other transactions access a table during most of the operation, replacing the need for VACUUM FULL's exclusive table lock.

Perplexity has released a local AI agent called 'Portable Computer' for Windows that can perform multistep tasks, but it requires an RTX GPU with at least 24GB of VRAM, effectively limiting it to RTX 3090/4090-class cards. The article itself is mostly boilerplate with minimal technical detail beyond the hardware requirement.

This is part 2 of a hands-on guide to customizing Xfce's desktop panels using the Panel Profiles tool. It walks through fixing alignment issues in the 'Unity' and 'Cupertino' (macOS-style) layouts—specifically, adding a transparent, expanded separator after the AppMenu plugin to push status icons to the right end of the panel.

Perodua is offering a combined RM16,500 rebate (RM10,000 Malaysia Day rebate plus RM6,500 from June) on its QV-E EV, bringing the battery leasing plan price to RM53,499 and outright purchase to RM77,499. The battery leasing plan costs RM215/month over 9 years (RM23,220 total), making the all-in leasing cost RM76,719 — only RM780 cheaper than outright purchase.

Steven J. Vaughan-Nichols argues that AI companies routinely label models 'open source' when they only release open weights—the final trained parameters—without training data, architecture documentation, or reproducible pipelines. The Open Source Initiative and Stanford HAI's James Landay distinguish 'open weights' (you can deploy and fine-tune) from genuine 'open source' (you can inspect, reproduce, and understand why the model behaves as it does), calling the former 'open distribution' rather than openness.

After MinIO's company abandoned the open-source project in late 2025, this post evaluates replacements for MinIO's most common use case: single-node local S3 emulation in Docker Compose demos and build pipelines. Criteria include Docker image availability, S3 compatibility, OSI-approved licensing, simplicity, and an active community or commercial backer. The author tests alternatives using a DuckDB + Apache Iceberg + S3 stack as the baseline workload.

This sponsored Everpure article argues that AI agents running on $20-40M Nvidia SuperPOD clusters waste ~$25/minute when GPUs sit idle waiting for data, and pitches Everpure's storage as the fix. Par Botes, Everpure's VP of AI Infrastructure, says metadata becomes richer than the data itself in AI workloads because it encodes semantics and behavior.

CSS-Tricks has gone inactive again under DigitalOcean ownership, with no communication about its future. DigitalOcean fired the site's staff in February 2023, rehired lead editor Geoff Graham in June 2024, but has now gone silent once more. Meanwhile, DigitalOcean pledged $3M USD to Omarchy (DHH's Arch Linux configuration project) while ceasing its $50/month payments to GNOME and Flathub infrastructure.

Gartner analyst Domenico Scriva told the firm's IT Symposium in Australia that spite-driven M365-to-Google Workspace migrations yield no ROI, and Google's lower per-license cost evaporates once you add telephony, security, BI, and OS licensing—landing ~$2/month more than M365 E5. He warned that migration takes at least two years, Microsoft knows you can't move quickly so last-minute negotiation threats fail, and productivity suites have barely changed in 30 years so there's rarely a worthwhile outcome from swapping.

Sidec announced 24 finalists (8 per track) for the Selangor Triple Accelerator Programme 2026, winnowed from 511 applications and 90 participating startups across three tracks: Deep-X (deep tech), Retail-X, and Token-X (blockchain). Showcase Days ran August 18-20 at Menara Affin, TRX, Kuala Lumpur, with the Grand Final still ahead. Notable Deep-X finalists include Al MSP 365 and Sono Holding; Token-X includes BLOX Blockchain and Xtractify.

Volvo is increasing battery capacity for its 2028 XC60 and XC90 plug-in hybrid refresh. The article content did not load beyond cookie consent boilerplate, so no specific battery sizes, range figures, or pricing details are available from the provided text.