AI Weekly Malaysia

Meta launched a Mac app for Meta AI with system-wide dictation and screen-aware contextual answers powered by its Muse Spark model, competing with tools like Wispr Flow, Superwhisper, and Monologue. The update also lets business owners connect Instagram, Facebook, ad campaigns, and Google Workspace accounts to pull campaign performance, audience engagement, competitor intelligence, and auto-generate decks, docs, and spreadsheets.

I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15).The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device.The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work. Comments URL: https://news.ycombinator.com/item?id=49373456 Points: 582 # Comments: 114

Researchers at UMass Amherst demonstrated a 'Zombie Card' attack that rewrites the expiration date a POS terminal reads from an expired Visa contactless card over NFC, reviving it for in-store purchases without breaking the card's cryptography. The attack requires physical possession or sustained NFC proximity plus a MitM relay, and only succeeded at one of three tested US banks; another declined all attempts and a third used a different EMV kernel where the modification failed. Disclosed to Visa in May 2025, no CVE, no exploitation, and no published mitigation exist as of August 2026.

Seasonic announced the Prime Enterprise RX-1600, the world's first 80 Plus Ruby certified ATX power supply, delivering 1600W with up to 95.4% efficiency. The article text is largely boilerplate with minimal additional technical detail beyond the headline specs.

Newegg is offering a 3-item bundle with an AMD Ryzen 7 9800X3D CPU, 32GB Corsair Vengeance DDR5 RAM, and a Gigabyte X870E motherboard for $241, a claimed $249 savings. The deal is positioned at PC gaming enthusiasts.

A March 2026 Meta Sev 1 incident illustrates 'shady AI': an approved internal AI agent posted a technical response publicly without approval, causing an employee to inadvertently expose sensitive data to unauthorized engineers for over two hours. The article distinguishes shadow AI (unapproved tools) from shady AI (approved tools used in unapproved or unexpected ways), noting a July 2026 SANS survey found 76% of security teams now have a role in governing enterprise AI.

A technical glitch in OpenAI's Trusted Access for Cyber (TAC) program revoked previously approved status from vetted security researchers, removing their Daybreak Blue access tier from Codex Desktop and CLI. OpenAI told affected users to reverify via email, but some who followed the instructions were told their accounts were ineligible—and support could neither reset the verification state nor restore the prior approval.

Bermaz XPeng has issued a voluntary recall for 481 of the 839 registered XPeng X9 units in Malaysia (roughly 57%), targeting pre-facelift models produced before 11 August 2025. The front air springs may lose airtightness under high heat and humidity, potentially causing air leaks, warning alerts, and in extreme cases compromised handling. Affected owners get a free full front air suspension replacement plus an 8-year/160,000 km transferable warranty.

China's LineShine supercomputer topped the June 2026 TOP500 list at ~2.2 exaflops, but ranked only 4th on HPL-MxP and poorly on Green500, exposing how different benchmarks tell conflicting stories. The broader point is that TOP500 rankings are losing relevance because privately held AI compute clusters (e.g., from big tech) don't participate, and running HPL is increasingly seen as a distraction from real AI workloads.

Researchers disclosed 'CDN Tsunami,' two DoS attack techniques (HBA and HCA) that exploit how CDNs translate HTTP/3 client traffic into HTTP/1.1 requests to origin servers, achieving up to 350x bandwidth amplification on Alibaba/Baidu/Tencent and 36-51x on Cloudflare, CloudFront, and Fastly. All six tested CDNs were vulnerable to the bandwidth variant; Cloudflare alone was unaffected by the connection variant because it buffers the full request before connecting to origin. Baidu and Tencent confirmed and deployed fixes; no CVEs have been assigned and no in-the-wild exploitation is reported.

ThreatFabric has documented a new Android malware family called Manic, active since February 2026, that combines banking trojan and spyware capabilities. Its standout feature is a Wi-Fi mesh relay technique allowing infected offline devices to exfiltrate data through nearby compromised devices with internet access. It targets 169 package IDs including Ukrainian, Russian, and European banking, government, crypto, and messaging apps, distributed via phishing sites and dropper apps impersonating utilities.

SMIC posted its first $3B quarter with revenue up 36.1% YoY and net profit nearly tripling to $479.2M, running at 93.7% utilization. Co-CEO Zhao Haijun announced wafer price hikes for Q3, citing a gap between SMIC's prices and industry-leading foundry prices, as US export controls cut Chinese AI data center builders off from TSMC and Samsung at the leading edge.

Cycode researchers disclosed a 9.4 CVSS vulnerability chain in AIT-GUI (versions ≤2.5.1), the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. The server binds to 0.0.0.0:8080 by default, discards its configured host, and exposes state-changing routes with no auth, no CSRF protection, and path traversal—letting any unauthenticated party issue spacecraft commands, run server-side scripts, or execute command sequences. Fixed in version 2.5.2.

Microsoft is investigating reports that Windows 11's August Patch Tuesday update (KB5121003, covering 421 CVEs including 236 for Windows) causes certain games—ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals—to crash, freeze, or trigger PC restarts with EXCEPTION_ACCESS_VIOLATION errors. Users theorize tighter kernel handle validation may have exposed latent bugs in third-party drivers that Windows previously tolerated, though Microsoft has not confirmed this.

A Kickstarter campaign for a Blu-Ray drive combined with a 9-in-1 docking station has reached 160x its funding goal at the halfway point of the campaign, driven by demand for physical media nostalgia. The article text itself is almost entirely Tom's Hardware site navigation boilerplate with no additional product or campaign details beyond the headline.

G.Skill agreed to a $2.4M class-action settlement over misleading DDR4 and DDR5 speed marketing, with eligible buyers receiving $20–$25 each. The vendor will also add XMP and EXPO packaging warnings to clarify that advertised speeds require overclocking profiles, not default JEDEC operation.

Zimperium zLabs reports ToxicPanda 2.0 (aka TgToxic) has expanded from targeting 16 banking apps to 349 financial institutions across 16 countries, with 167 remote commands and PIN harvesting via fake overlays. The malware abuses Android accessibility services to enable Wireless Debugging through ADB for privilege escalation, overwrites lock screen PINs, and exempts itself from battery optimization to persist in the background.

Pine64 has halted all Linux hardware manufacturing — including SBCs, tablets, and phones — through at least mid-2027 due to memory component shortages. The freeze affects the entire open-source maker hardware lineup with no indicated workaround or alternative supplier.

Tom's Hardware highlights a deal on the Gigabyte Aorus Master 16 gaming laptop, now $3,599 (down $800), featuring an RTX 5090 GPU, 24-core Arrow Lake CPU, 32GB RAM, 2TB SSD, and an OLED display. The article is primarily a deal alert with minimal technical analysis.

Forrester research warns that business transformation, software development, and tech implementation are among the tech job categories likely to be hit hardest by AI, while enterprise software will be reshaped rather than displaced. Only three market categories — infrastructure; data and AI; and identity, access, and network security — are positioned for clear growth; all others will be forced to adapt. Application development tooling, low-code platforms, content management systems, and IT services (including Oracle, Salesforce, SAP, and Workday implementation) are described as directly in the path of genAI code development.

Article URL: https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html Comments URL: https://news.ycombinator.com/item?id=49372583 Points: 1012 # Comments: 328

A US federal judge struck down the ATF's 'ghost gun' rule covering 3D-printed firearm parts, ruling that the restrictions violate the Fifth Amendment and conflict with the historical tradition of DIY gunsmithing. The article text itself is mostly site navigation boilerplate with no further substantive detail.

Tan Chong Ekspres Auto Servis (TCEAS) launched a mini-program inside TNG eWallet, letting users book and pay for car servicing across 40+ centres nationwide. Launch Rahmah bundles start at RM109 (semi-synthetic) and RM129 (fully synthetic), covering engine oil, filter, inspection, and labour with a 6-month warranty.

A console modder fitted working Switch 2 Joy-Con internals into original Wii Remote shells, with motion-sensing controllers that snap magnetically onto a Switch 2. The article text itself is mostly site boilerplate with no additional technical detail beyond the headline.

NASA and Katalyst Space abandoned plans to grapple and reboost the Swift gamma-ray observatory into a higher orbit after Katalyst's LINK spacecraft lost two of three reaction wheels to a post-launch spin. Engineers used electric thrusters and a software update to regain control, but the diminished attitude control made the reboost unsafe. LINK will still attempt a rendezvous for data-gathering, but Swift is expected to re-enter Earth's atmosphere later this year.