AI Weekly Malaysia

Signal introduced Automatic Key Verification (AKV), which uses a new open-source key transparency server with a log tree ledger and prefix tree index to detect if someone has tampered with public encryption keys to intercept messages. Users can tap 'Verify automatically' on a contact's safety number screen to get a green checkmark confirming the key matches Signal's key transparency system. A key caveat: you need your contact's phone number for this to work.

Why: If you ship or rely on end-to-end encrypted messaging, Signal's key transparency architecture is a working reference design for detecting man-in-the-middle attacks without manual safety number comparison. Builders designing similar systems should study the ledger-plus-index approach, but note the phone-number dependency limits its applicability for username-only or identifier-agnostic systems.

X has open-sourced its 'For You' timeline ranking algorithm and core ranking engine on GitHub under Apache v2, making the codebase 10-15x larger than its previous open-source release by adding model configuration, filter, and ranking parameter details. A new 'Under the Hood' transparency tool lets users who posted 10+ times in the past month download a JSON file showing labels applied to their account or posts, which can be fed into an LLM alongside the GitHub repo for interpretation.

Why: If you ship content on X for a product, startup, or personal brand, you can now download your own ranking-label JSON from the 'Under the Hood' settings page and cross-reference it against the actual weighting parameters in the GitHub repo to understand why your posts underperform. For AI/ML learners, the open-sourced ranking code is a real-world production recommender system you can inspect and partially run outside X, which is rare.

Gregory Kurtzer, founder of CentOS and Rocky Linux, has launched OpenWALDO—a project to build a shared, open-source AI training dataset with full provenance and a bill of materials. Funded by his AI infrastructure company CIQ, the effort currently targets 167 billion transparent tokens, a fraction of the trillions used by major AI labs. The project argues that even 'open-weight' models hide their training data, creating legal and compliance risk for downstream users.

Why: If you ship products using open-weight models, you currently have no auditable trail for training data lineage—OpenWALDO's 'bill of materials' concept could eventually let you point to a verified baseline corpus and reduce copyright/consent exposure. But at 167B tokens today versus trillions in proprietary datasets, this is not yet something you can train a competitive model on; treat it as a project to watch, not a dataset to use.