LEMON BLOG

It was probably only a matter of time. Over the past few years, subscription fatigue has become part of modern digital life. Services that used to be completely free now routinely lock extra storage, customization, convenience features, or power-user tools behind a monthly fee. Messaging apps have mostly avoided that consumer-facing shift, but WhatsApp may be getting ready to test the waters.

Malaysia's fuel subsidy debate is back in focus, and this time the pressure is coming from outside the country. Economists are warning that if the conflict involving Iran keeps global oil prices elevated, the government may need to rethink how it supports petrol prices, especially for RON95. The concern is not just about today's pump price, but about how long public finances can keep absorbing the gap if energy markets stay volatile.

Google is making an important change that could quietly break some existing advertising workflows if nobody is paying attention. Starting April 1, 2026, certain developers will no longer be able to upload Customer Match data through the Google Ads API. The restriction is aimed at developer tokens that are either new to Customer Match or have not uploaded Customer Match data during the six-month window from October 2025 through March 2026. If those tokens are not on Google's allowlist, upload attempts will fail. 

Apple has rolled out iOS 26.3.1, and while this is not the bigger iOS 26.4 release many people are waiting for, it is still an important update for iPhone users. Apple's own release pages show iOS 26.3.1 as the current version, released on March 4, 2026, alongside iPadOS 26.3.1 and macOS 26.3.1. Apple's security update page also confirms that this release has no published CVE entries, which means this one is focused on bug fixes and compatibility rather than security patches.

Kubernetes has always been powerful, but it's never been "simple." Even something as routine as extending tooling can turn into a small project: build the plugin, package it, ship it, worry about OS differences, CPU architecture, and how safely it runs in production.

We live in a world that's trained us to skim. Infinite scroll, endless tabs, headlines flying by faster than we can blink. That's why a well-designed magazine spread (or a digital long-form layout that borrows magazine logic) feels almost rebellious. It doesn't just present content. It creates a place to read.

Ever notice how a simple tap in a good mobile game feels weirdly satisfying? You press a button and it gives a tiny bounce. A menu slides in like it has weight. A wrong move triggers a subtle shake that says "nope" without yelling at you. None of that is random flair. It's deliberate feedback. And it's one of the biggest reasons games feel "alive" while a lot of everyday apps feel… stiff.

Malaysia's plan to restrict social media access for children aged 16 and below is starting to look a lot more specific than the early headlines suggested. Communications Minister Fahmi Fadzil recently clarified that the intention isn't to block young teens from the internet entirely, but to stop them from running their own social media accounts. 

Cross-platform sharing is one of those "why is this still annoying in 2026?" problems. Sending a bunch of photos from an Android phone to an iPhone (or a Mac) often turns into a small project involving apps, links, and patience.

If you're thinking of signing up for iQIYI in Malaysia, there's a new "subscribe before the deadline" moment coming up. iQIYI says it will increase subscription prices for new customers starting 1 April 2026, while existing subscribers keep paying their current rates for the paid tiers. 

If you spend any time on social media, you've probably noticed how fast cybersecurity rumours can spread. One dramatic post turns into a thread, then screenshots start flying around, and suddenly people are convinced a major company has been hacked.

Designers don't struggle with starting. We struggle with stopping. Iteration is baked into the job: sketch, critique, refine, tweak, repeat. It feels productive. It looks productive. And honestly, it can be a very comfortable place to live. But stepping away from the canvas at the right moment, that's a skill most people only learn the hard way.

Windows 11 upgrades are supposed to be boring. You click update, it restarts a few times, and you get back to work. But for a small group of users, the experience has reportedly been the exact opposite: upgrade completes, Windows loads… and suddenly the machine can't get online through Ethernet.

Some weeks are dominated by one headline breach. This one wasn't. Instead, it showed something more useful (and more uncomfortable): how modern attacks are increasingly built from "small" weaknesses. An exposed key here, a misconfigured access rule there, a trusted service being used in an untrusted way. When you line the stories up, the direction is obvious. Threat actors are moving faster, blending in better, and targeting environments that matter most: networks, cloud platforms, developer pipelines, and the everyday apps people assume are harmless.

Malaysia's 5G story just picked up another twist. After Telekom Malaysia (TM) revealed it had signed a three-year 5G wholesale agreement with U Mobile, the assumption was pretty straightforward: TM would transition away from DNB's wholesale 5G access and move onto U Mobile's Multi-Operator Core Network (MOCN) setup.

If you've ever tried to coordinate a "same car, different pick-up points" situation with friends, you'll know it usually turns into a group chat negotiation that never ends. Grab is trying to clean that up with its Group Ride feature, which has now rolled out in Malaysia after launching in selected regions back in 2024.

If you've been using ShopBack Pay as a checkout option, there's a deadline to take note of: ShopBack Pay will be discontinued in Malaysia starting 25 March. That means the payment option will disappear from the app, and you won't be able to use it for future purchases after that date.

Disk encryption is supposed to be your "last line of defence." If your laptop goes missing, the idea is simple: the data stays locked, even if the device is in the wrong hands. But that protection can get messy when encryption is paired with third-party components that sit before Windows even boots. That's the core concern behind two recently highlighted vulnerabilities involving CryptoPro Secure Disk (CPSD), a product designed to work alongside BitLocker by adding extra controls like pre-boot authentication.

If you use Visual Studio Code daily (or you manage developer machines in an organisation), this isn't the kind of advisory to brush off as "just another extension issue." Security researchers have flagged multiple vulnerabilities across widely used VS Code extensions, and the combined install base is enormous. When flaws show up in tools that sit inside your editor, the risk isn't just theoretical, because extensions often have access to your workspace files, local environment, tokens, and internal resources.

Windows 11 lets you change a lot, but it also has a weird habit of hiding important switches in three different places, while leaving other settings completely locked down. You can tweak some privacy options here, remove a couple of apps there, and maybe find one or two advanced toggles in obscure menus… but you never really feel like you have full control.