AI Weekly Malaysia

A contractor hired by Pageloot (a QR code marketing company) stored staging server credentials in a Google Doc set to 'anyone with the link,' which Google then indexed so the hostname and credential string appeared in search autocomplete. Pageloot co-founder Siim Kostabi says an employee discovered the leak while debugging something unrelated by typing their domain into Google Search. The company cut the contractor's access, rotated all exposed credentials, and banned storing passwords on Google Docs, Slack, Notion, or similar collaboration tools.

Google's Pixel 11 Pro Fold is launching in Malaysia next week, priced from RM7,999, with a thinner 10.1mm folded / 5.0mm unfolded design weighing 239g. It runs Google's Tensor G6 chip with 16GB RAM, offers 256GB/512GB storage, an 8-inch inner OLED display, and a 48MP main camera with 5x optical zoom.

ST Telemedia Global Data Centres secured up to US$1.37 billion (RM5.6 billion) in green financing for Phase 1 of its STT Johor campus in Nusa Cemerlang Industrial Park, Johor, with a planned capacity of up to 166MW IT load. The consortium-led facility was arranged by UOB Malaysia with OCBC, Standard Chartered, and CIMB as mandated lead arrangers, and is tied to green loan principles for sustainable data centre construction.

Cisco CEO Chuck Robbins told the Q4 earnings call that Anthropic's Mythos bug-finding model is driving a network refresh 'supercycle,' as customers rush to replace unsupported (past LDOS) networking equipment they now consider too risky to operate. Robbins said buyers are pulling from security budgets to fund replacements, and cited quantum-readiness and AI network demands as the other two factors. Cisco reported $17.3B Q4 revenue (up 17%) and $63.3B for the year (up 12%).

A critical SharePoint authentication bypass (CVE-2026-55040, CVSS 9.1) patched in Microsoft's July 2026 Patch Tuesday is now being actively exploited after Rapid7 released a Python proof-of-concept. The flaw chains four weaknesses in SharePoint's JWT token validation pipeline (SPJsonWebSecurityTokenHandlerV2 and SPJsonWebSecurityBaseTokenHandlerV2) to let an unauthenticated attacker forge a valid Bearer S2S token and impersonate any site user or administrator.

South Korea's Kospi has climbed over 20% from its July low, re-entering bull-market territory as investors return to semiconductor giants like SK Hynix and Samsung. The rebound follows a sharp sell-off driven partly by leveraged positions and forced selling, and is attributed to strong U.S. tech earnings and continued AI infrastructure spending sustaining memory chip demand.

Article URL: https://community.openai.com/t/codex-in-chatgpt-desktop-app-for-linux-is-now-in-preview/1390027 Comments URL: https://news.ycombinator.com/item?id=49281916 Points: 463 # Comments: 316

OpenAI has made Codex available as a Linux desktop download, integrating its coding agent directly into ChatGPT. The page highlights multi-agent workflows using built-in git worktrees and cloud environments, a 'Skills' system for teaching Codex team-specific standards, and scheduled background tasks like issue triage, alert monitoring, and CI/CD work.

Tencent disclosed it spent $53B in capex last quarter and could rent that compute at 30%+ profit margins almost immediately, but is instead building its own models and selling tokens through products like WorkBuddy (an agent swarm) and CodeBuddy (code generation). It released the 295B open-weight Hunyuan-3 in July and says Hunyuan-4 will be larger and more capable, with products being co-designed around it.

Tencent reported spending $53 billion on capex in Q2 and said it could recover depreciation almost immediately by renting compute at 30%+ profit margins, but is instead allocating that capacity to build its own models and AI applications for longer-term returns. It released the 295-billion open-weight Hunyuan-3 in July, with Hunyuan-4 promised as bigger and more capable, and is shipping agent products like WorkBuddy (agent swarm) and CodeBuddy (code generation tool tied to cloud migration).

Capillary Technologies announced a partnership with MR D.I.Y. to power the retailer's loyalty programme across its 1,500+ stores in Malaysia, deploying Capillary's Loyalty+, CDP+, and Insights+ products for customer data management and loyalty orchestration. Santosh Reddy (President, APAC at Capillary) and Alex Goh (SVP Marketing at MR D.I.Y.) framed the deal as scaling personalised engagement across a large Southeast Asian retail network.

Simon Willison announced alchemy-utils 0.1a1, a cross-database extension of sqlite-utils built on SQLAlchemy, with performance improvements specifically for DuckDB exports and CSV imports.

VentureTECH, a Malaysian government-backed investment company under MIGHT, announced US$6.85 million (RM28 million) in investments across three Bumiputera-led tech companies: Move Robotic (warehouse/logistics automation offering a bundled Robot-as-a-Service model), Recove Group (Med-Tech commercialisation platform), and Edote (digital inclusion). The investments were signed at a ceremony in Putrajaya and tied to the Bumiputera Economic Transformation Plan 2035 (PuTERA35).

Researchers from Germany's Helmholtz Center for Information Security found that Chinese Loongson processors (pre-3A6000) have leaky L1 data caches exploitable via an architectural flaw in the LoongArch ISA, allowing unprivileged attackers to recover kernel AES keys, root password hashes, and bypass ASLR within seconds—even from inside a VM. Software mitigations are not possible; affected users must either replace the chip or evict private data from L1 cache (costing ~1.4% performance), which can require disabling hyperthreading.

xAI released Grok 4.6, a 1.5T parameter model focused on long-running agents and interactive/visual work, alongside Grok Bot (@bot), an early-beta AI teammate that signs into your tools and returns finished work. Artificial Analysis reports Grok 4.6 is cost-competitive on their private AA-Briefcase agentic knowledge work benchmark, ranking near the top while costing substantially less than leading rivals. The model was trained using Grok 4.5-regenerated SFT trajectories across reasoning, agent harnesses, STEM, software engineering, and knowledge work, plus agentic RL on tasks including kernel optimization, web development, and CAD.

China's latest auto sales data shows Geely's Xingyuan EV hatchback was the top-selling model in the six months through July at ~197,500 units priced just under 100,000 yuan ($14,820), beating Tesla's Model Y (~180,000 units, 263,500–313,500 yuan). BYD failed to crack the top three most popular individual models despite high overall volume, and Volkswagen was the only traditional foreign automaker still in the top rankings.

Google launched the Pixel 11, Pixel 11 Pro, and Pixel 11 Pro XL in Malaysia, starting at RM3,999, with pre-orders open and availability next week. All models run the new Tensor G6 chip (20% better power efficiency, 25% faster browsing, 15% faster app loading vs G5), ship with Android 17, 256GB base storage, and include Gemini-powered features plus 7 years of OS and security updates. The series introduces Pixelsnap, a magnetic accessory system supporting Qi2.2-certified wireless charging at up to 25W.

OpenAI's ChatGPT Ads service has been serving ads and billing customers for up to a day after campaigns are paused, due to a defect where the ad-level serving status doesn't refresh when the campaign-level pause is triggered. A UK advertiser, Ed Bolton of Excel4Business, was charged £60.72 in invalid charges from the initial occurrence and ~£6.47 from a recurrence on August 4–5, with OpenAI support confirming the bug and processing refunds. OpenAI began testing ChatGPT ads in the US in February 2026 and expanded to the UK, Mexico, Brazil, Japan, and South Korea as of August 13.

JetBrains CTO Vladislav Tankov describes how his team evaluates frontier LLMs against private repositories, including their monorepo, rather than trusting public benchmark scores. Claude Fable 5 posted a 44.3% Python pass rate in JetBrains' suite versus 28.2% for Opus 4.8, solving 18 tasks Opus missed while losing only 2, and despite higher per-token cost, delivered lower cost per task on complex long-running work.

Anthropic's data team (Clement Peng, Lily Zhao) describes deploying Claude Tag (public beta) as a Slack-based data analytics agent that lets non-analysts ask ad-hoc data questions backed by the same governed semantic layer, skill files, and evaluation suite that previously achieved ~95% accuracy with Claude Code. The post outlines five learnings from a year of deployment covering distribution, permissions, freshness, and observability, though the excerpt cuts off before detailing them.

Hugging Face ran a 19-day hackathon (July 15–Aug 2, 2026) where 1,200+ participants used coding agents (Claude Code, Codex, Cursor, OpenResearch's orx) to reproduce ICML 2026 papers claim by claim, producing 6,816 Trackio logbooks covering 2,226 of the conference's 6,352 accepted papers (~a third). ICML 2026 saw 23,918 submissions and 6,352 acceptances, roughly double the prior year, partly attributed to AI agents accelerating experiment cycles and writing.

Anthropic updated Claude Tag, its Slack-integrated assistant, to read context across an entire channel rather than processing messages one at a time. The previous lightweight yes/no classifier is replaced with a four-option decision system (reply inline, start a thread, route to existing work, or stay silent), and Anthropic reports roughly 30% better accuracy in deciding when to proactively respond. The additional context does not count toward usage or spend limits on any plan.

Simon Willison notes that DeepSeek V4 Pro 0813 is now available via API on OpenRouter, with no official announcement page from DeepSeek. Open weights are likely but unconfirmed, given prior releases of DeepSeek-V4-Pro (April) and DeepSeek-V4-Flash-0731 (July). Willison observed visibly different outputs across the model's low, medium, and high reasoning levels, and benchmark numbers circulated only through a WeChat group, a deleted Reddit post, and an ASCII-art Hacker News table.

Article URL: https://okmij.org/ftp/Computation/Impressions/PrincipiaMathematica.html Comments URL: https://news.ycombinator.com/item?id=49279928 Points: 275 # Comments: 155

GPU cloud provider Nebius plans to bring online over 1 GW of datacenter capacity annually starting 2027, funded by $20-25B in 2026 capex, $9B+ in customer prepayments, and asset-backed debt using GPUs as collateral. The company projects $20-25M revenue per MW for medium-term leases and $40-50M for short-term leases under six months.