AI Weekly Malaysia

Microsoft's August 11, 2026 .NET Framework cumulative update broke WPF printing and PDF/XPS generation, causing a System.IO.FileFormatException when content uses certain fonts including Calibri. The bug affects Windows 10, 11, and Windows Server 2012 through 2025. Microsoft's workaround—enabling Switch.MS.Internal.TtfDelta.DisableCmapAndSbitOverflowProtection in app config—disables security protections introduced in the same update, forcing a tradeoff between printing functionality and security.

Why: If you ship or maintain WPF applications that print or export PDF/XPS, test immediately against the August 2026 .NET Framework update. You must decide whether to apply the workaround (which re-opens vulnerabilities the update was meant to fix) or hold off on the update entirely until Microsoft patches it. .NET/WPF remains common in Malaysian enterprise and government line-of-business apps, so this is likely to surface in production environments soon.

Security engineer David Dale built Glassbox, a local browser fingerprinting tool that reveals how identifiable your browser is, with assistance from Claude Code. It exposes advanced tracking techniques like audio fingerprinting via silent sawtooth waves found on AliExpress, and estimates identifiability (e.g., 99% in Chrome, 56% in Tor).

Why: Builders developing privacy-focused web apps or evaluating anti-fraud scripts can use Glassbox to see the exact raw signals trackers use. It also serves as a practical example of how AI coding tools like Claude Code enable solo developers to ship specialized security utilities.

Developer Matt Callaghan discovered AliExpress uses obfuscated WebAudio scripts to fingerprint browsers by generating silent sawtooth waveforms, measuring the resulting frequency data through the browser's audio implementation, and combining it with screen dimensions, device memory, WebGL rendering, and mouse event data into an encrypted telemetry payload. The zero-gain audio is inaudible but still activates the browser's audio path, which caused his multipoint Bluetooth headphones to stop playing phone audio whenever an AliExpress page loaded. Firefox and Brave reportedly have protections against this technique.

Why: If you build web apps that use the WebAudio API, understand that zero-gain audio graphs still engage OS-level audio paths and can interfere with user hardware like Bluetooth multipoint devices—a real UX bug vector. If you care about user privacy, this is a concrete example of how browser fingerprinting goes beyond cookies and canvas, combining audio hardware characteristics with device telemetry; check whether your browser's anti-fingerprinting settings (Firefox/Brave) are enabled if you serve users in SEA where AliExpress traffic is high.

AliExpress allegedly runs hidden browser code that uses the audio system to fingerprint users' PCs, even when no sound is playing. The technique allows the platform to identify and track devices through audio-context data without user awareness.

Why: If you build web apps or e-commerce platforms serving Southeast Asian users where AliExpress is a major competitor, understand that audio fingerprinting is an active tracking technique you may need to account for in privacy policies or counter with anti-fingerprinting measures. Builders shipping analytics or fraud-detection systems should know this method exists and consider whether their own tracking stack raises similar consent issues.

AliExpress was reportedly caught using inaudible audio signals sent to visitors' browsers to fingerprint them, according to an Ars Technica article. The article body provided is entirely cookie consent boilerplate and contains no technical detail, evidence, or analysis of the claim.

Why: No actionable takeaway can be derived from the provided text, which contains only consent management boilerplate rather than the article's substance. Builders cannot assess the fingerprinting technique, its detection, or mitigations without the actual article content.

Flashforge is running a promotion during the AliExpress 828 mega-sale, offering discounts on 3D printers including the Adventurer 5M, AD5X, and Adventurer 5M Pro, as well as HS PLA filaments. The article is sponsored content with no specific pricing details or independent evaluation.

Why: This is a sponsored sales announcement with no concrete prices, benchmarks, or technical analysis. There is no actionable takeaway for builders beyond 'there is a sale if you happen to be shopping for a 3D printer.'