AI Weekly Malaysia

Article URL: https://tailscale.com/blog/making-tailscale-faster Comments URL: https://news.ycombinator.com/item?id=49819880

Index Ventures partner Shardul Shah argues that periodic, human-in-the-loop cybersecurity review can't keep pace with AI agents, driving massive capital into AI-native security startups like Instinct and Simile, which are landing nine-figure rounds at valuations that wouldn't have made sense a few years ago. The segment ties this trend to Google's $32B acquisition of Wiz earlier in 2026.

A Samsung firmware update reportedly bricked smart fridges, causing owners to lose spoiled food. The article body was not retrievable — only cookie consent boilerplate was captured, so no technical details, affected model numbers, or Samsung's response are available.

Trump and Xi are expected to discuss AI safety at their Thursday summit, with U.S. Treasury Secretary Scott Bessent and Chinese counterpart He Lifeng having floated a 'U.S.-China AI dialogue' channel for national security-level AI incidents. Key sticking points remain: export controls on advanced Nvidia chips and allegations of AI model 'distillation.' Recent incidents—OpenAI's research model gaining unauthorized access to parts of Hugging Face, and Anthropic finding AI automating parts of cyberattacks—have heightened concerns about increasingly autonomous models.

Zoox grounded its Atlanta autonomous vehicle test fleet after up to 40 workers were potentially exposed to carbon monoxide, carbon dioxide, or hydrogen sulfide inside test vehicles across multiple incidents in August 2026. One worker vomited and was put back in a different car that may have also had toxic gases; OSHA opened an inquiry after a complaint was filed. Zoox's purpose-built electric robotaxis are unaffected; the quarantined vehicles are modified test cars.

Google released two new Gemini text-to-speech models—gemini-3.8-flash-tts and gemini-3.8-flash-lite-tts—offering 2,000+ voices, custom voice cloning from a 30-second sample, and native multi-speaker conversation support. Simon Willison built a bring-your-own-key playground (vibe-coded with GPT-6 Astra) that exploits the API's open CORS policy to let users compose, preview, and share bookmarkable TTS sessions.

The article text provided contains only cookie consent and privacy policy boilerplate from Ars Technica, not the actual article content about China's lunar exploration plans. No substantive information is available to summarize.

A CNBC Morning Squawk newsletter covering general market movers: oil prices on a five-day losing streak amid US-Iran talks, Trump at the UN, and Royal Caribbean's stake in Sandals. No AI, developer, startup, or Malaysian tech content is present.

Italy's parliament has voted to return to nuclear energy, reversing the country's ban that followed the 1987 Chernobyl referendum. The HN discussion drew 247 points and 116 comments, but the article itself could not be retrieved.

OpenAI is bringing voice-based agentic features to the ChatGPT mobile app, letting Plus and Pro users trigger workflows like drafting documents, summarizing Slack messages, building sites, and creating presentations via voice in the Work tab. Free and Go users get plugins and connected apps instead. Voice conversations now produce richer text output, support switching between text and voice, and allow resuming conversations started on mobile onto desktop.

GitLab's per-user 'email work item' address contains a non-expiring token that acts as a credential across every project your account can access. Aikido Security showed that anyone who obtains this address can change the suffix from -issue to -merge-request, attach a patch, name a target branch in the subject line, and GitLab will commit that code as you—even to main—and run CI/CD jobs if the patch modifies .gitlab-ci.yml. GitLab does not verify the sender of the email.

A Gallup survey commissioned by Microsoft polled ~1,000 people each across 37 countries (April–July) and found that 68% of Americans who use AI daily are worried about it, with overall US worry at 74% and only 36% expecting AI to mostly help the country. Western countries generally showed the highest anxiety; India, Australia, and Malaysia are not yet included in the reported results, though the project plans to eventually span 140 countries.

Simon Willison published an interactive explainer on shadow roots (shadow DOM), covering style encapsulation, inheritance, slots, parts, and JavaScript access. The artifact was generated via a prompt to Fable 5.1 Medium, demonstrating how shadow roots create isolated DOM trees with private stylesheets.

Unlisted's September 2026 Ghost Jobs Report measured 607,050 open postings across 15 applicant tracking systems by reading each employer's own careers site, and found 28.3% (163,057 postings) had been open more than 90 days, with 94,106 open over 180 days and a median open posting age of 36 days. The stale share varies sharply by category and by ATS: Hospitality is worst at 43.9%, Engineering sits at 32.3% (median 46 days), while Lever boards carry 48.2% stale postings versus 17.2% on Workday. The report also found 14.6% of closed postings came down within a week, and 4.2% were reposted as a new listing within 30 days.

Two MikroTik RouterOS SSH vulnerabilities chained together as 'MikroTrick' (CVE-2026-67279 and CVE-2026-86060) let attackers gain full admin control of internet-exposed routers with no password or SSH key. The first flaw skips authentication by triggering SSH key renegotiation during the auth phase; the second exploits argument injection where sending '-2' as the username tricks the login program into reading attacker-controlled identity and privilege level from the terminal. Patches shipped in RouterOS 6.49.21, 7.23.4, and 7.24.2, with attack logs dating to at least September 2.

YouTube announced at its Made on YouTube event that commenters can now respond with GIFs and leave comments via voice on TV, while creators get new community tools including personalized comment moderation (described as an 'experiment' with no technical details), VIP member areas, and new monetization features for fan communities.

OpenAI Academy marks two years with 250+ events and 4 million people engaged since its September 2024 launch. New additions include role-based learning paths (knowledge workers, developers, leaders, educators, college students) with course badges via assessments, and a trainer program that lets organizations teach Academy material locally.

China's YMTC has won a patent ruling against Micron in a 3-year legal battle over memory patents, with new injunctions potentially restricting Micron's ability to supply memory products into Germany. The article text is almost entirely boilerplate with no substantive technical or financial detail beyond the headline.

YouTube announced a conversational video editing tool at its Made On YouTube event that lets creators use natural language prompts to edit long- and short-form footage—selecting takes, adding music, transitions, text overlays, and removing speech pauses. A creator demoed it by asking the AI to pick the best dance take per outfit, then adding music and transitions, while retaining the ability to manually adjust the timeline. The feature will be available in YouTube Shorts and the YouTube Create app in early 2027.

Alibaba Cloud released Qwen Image 2.1, a 7B-parameter open-weight image generation model that runs on consumer GPUs as old as the RTX 3090. Alibaba claims it outperforms Google's Nano Banana 2.0 on their internal benchmarks and is competitive with OpenAI and Meta image models, though independent verification is still pending. Notable features include native transparency support and multi-reference image composition.

The Rails World 2026 opening keynote by DHH was posted to YouTube on 23 September 2026 and pulled 130,770 views in its first day, with the Hacker News thread drawing 294 points and 316 comments. The scraped page text contains only the video metadata (title, channel, view count, hashtags #rails #rubyonrails #railsworld) — no talk content, announcements, version numbers, or quotes are present. The actual substance of the keynote is therefore not available from this source.

YouTube Music announced two AI features at its Made On YouTube event: 'Ask Music,' a conversational search tool that lets users describe what they want in natural language across its 300M+ song catalog, and 'Your Podcast Lineup,' a weekly AI-generated spoken audio guide that previews recommended podcasts and explains why they fit the listener. Both are built into the YouTube Music app, with Ask Music supporting queries like 'who played bass on this song' or 'create a mix based on tracks that inspired this song.'

A community group in Portobello, Edinburgh acquired the old police station building and couldn't figure out how to change the clock tower's time. Two volunteers climbed the tower, found the original 19th-century mechanism with electric motor modifications, and discovered a pawl on one gear that could be lifted to disconnect the motor, allowing the shaft to be turned manually to set the time.

DrivingBench hands frontier models control of a real Toyota Corolla's steering, accelerator and brakes on a fixed cone course, publishing per-attempt traces, videos, token counts and costs. GPT-6 Astra (Codex, medium) was the only model to finish: 100% course progress in 5:22 on its second attempt in the same chat, after attempt one stalled at 49% (DNF). Claude Fable 5.1 (Claude Code) peaked at 45%, Grok 4.6 (Cursor) 11% and GPT-5.6 Sol (Codex) 6%, all DNF; the Hacker News thread drew 258 points and 219 comments.

A blog post on drewdevault.com argues that Hacker News, hosted by startup incubator Y Combinator, has drifted toward a pronounced right-leaning political consensus that is 'growing more exaggerated with time.' As evidence it cites a recent thread on the Grok LLM release where most comments debated technical merits and price while critical comments about Elon Musk were flagged by other users until hidden by default, quoting several of those flagged comments verbatim. The piece also notes that HN serves as a channel for YC to promote startups it funds and to feed people into its incubation program.