Search the archive

HOW GOOGLE BECAME ADOBE'S SECRET WEAPON IN 2025

Google emerged as Adobe's key partner at the 2025 Adobe Max conference.

POP-UP LETTERS SET THE ‘ALPHABET IN MOTION' IN KELLI ANDERSON'S PLAYFUL BOOK

Designer Kelli Anderson's Alphabet in Motion is a five-year interactive pop-up book that brings the evolution of letterforms to life through tactile, kinetic design.

HOW PERPLEXITY BUILT AN AI GOOGLE

Perplexity built an “answer engine” by combining real-time web search with LLMs through a Retrieval-Augmented Generation (RAG) pipeline that searches the web, extracts relevant snippets, and generates cited answers. Its architecture uses Vespa AI to index 200+ billion URLs, intelligently routes queries between in-house “Sonar” models and third-party LLMs (GPT/Claude) based on complexity, and runs on a custom-built ROSE inference engine optimized for speed and cost.

WHY WE MIGRATED FROM PYTHON TO NODE.JS

Skald rewrote its backend from Python (Django) to Node.js a week after launching to address scaling concerns, primarily due to the complexities and limitations of Python's asynchronous capabilities for LLM interactions. Python's async support was unintuitive compared to Node.js. The migration took three days, and it resulted in a roughly threefold increase in throughput and a more unified codebase, though it required building more utilities from scratch and losing the Python ecosystem's ML focus.

WHY YOUR RETROSPECTIVES DON'T WORK AND HOW TO FIX THEM

Most retrospectives fail because teams document problems without fixing them, using vague action items like “investigate” instead of concrete solutions with owners and deadlines. Toyota's Production System principles are helpful to follow here. Assign a rotating “Fixer” role (one person responsible for fixes each week), conduct postmortems immediately while context is fresh, and implement permanent solutions that prevent problems from recurring rather than temporary patches.

ARCHITECTURAL DEBT IS NOT JUST TECHNICAL DEBT

Architectural debt extends beyond code to include business and strategy layers, impacting whole organizations. Enterprise Architects should focus on integration patterns, system overlaps, and vendor lock-in at the application/infrastructure layer, while at the business layer, they should concentrate on ownership, documentation, and cross-departmental processes. At the strategy layer, Enterprise Architects should ensure accurate capability definitions and frameworks to prevent flawed strategic decisions.

DOWNLOAD THE EBOOK

WEB CODEGEN SCORER

The Web Codegen Scorer is a tool developed by the Angular team at Google to evaluate the quality of web code generated by LLMs. It allows users to compare code quality across different models, frameworks, and tools using established code quality measures.

ORPC

oRPC makes building end-to-end type-safe APIs that adhere to OpenAPI standards easier. It supports contract-first development and OpenTelemetry integration, along with various frameworks, schema validators, and runtimes. The library provides a suite of packages for building APIs, creating clients, generating OpenAPI specs, and integrating with popular frameworks such as React and NestJS.

RUBY BENCHMARK

The Benchmark module in Ruby allows devs to measure the execution time of Ruby code snippets. It provides detailed reports, including user CPU time, system CPU time, total time, and real (elapsed) time.

THE CASE AGAINST PGVECTOR

While pgvector is a useful extension for bringing vector similarity search to Postgres, it's often oversimplified in online tutorials. There are still many challenges with running pgvector in production, including complex index management, query planning difficulties with filtering, and the hidden costs of real-time indexing. Existing blog posts often omit the operational realities and trade-offs involved, and for many teams, traditional vector databases are usually simpler.

WHY ENGINEERS CAN'T BE RATIONAL ABOUT PROGRAMMING LANGUAGES

Programming language choices are often driven by identity and emotion rather than objective technical analysis, leading to costly mistakes. Neuroscience research supports this, showing that challenging identity-based beliefs activates threat responses in the brain. This article shows this with examples, including a personal experience where a CTO's Perl preference bankrupted a company and a more recent example where a VP chose Rust based on hype.

AI'S DIAL-UP ERA

The current AI boom is similar to the internet's early days in 1995. There should be caution against extreme optimism and pessimism surrounding AI's impact. AI's effect on employment will vary by industry, depending on unmet demand and the pace of automation.

ASK HN: HOW TO DEAL WITH LONG VIBE-CODED PRS? (HACKER NEWS THREAD)

Faced with a massive, 9,000-line "vibe-coded" pull request, a Hacker News commenter asks for advice to deal with it, to which the community tells him to reject it outright or sarcastically use AI for review.

APP STORE WEB VERSION

This is an archive of the Apple App Store's frontend source code, unintentionally made public due to Apple forgetting to disable sourcemaps in production.

WHY NEXTCLOUD FEELS SLOW TO USE

Nextcloud suffers from slow performance due to excessive JavaScript usage.

A FRIENDLY TOUR OF PROCESS MEMORY ON LINUX

This is a detailed explanation of how Linux manages process memory that covers topics such as virtual memory, page tables, VMAs, memory mapping, copy-on-write, transparent huge pages, TLB invalidation, Meltdown mitigations, and tools for inspecting memory usage.

HARDER, BETTER, FASTER, STRONGER VERSION OF UBER H3 IN RUST

H3o is a complete Rust rewrite of Uber's H3 geospatial indexing library with easier integration, safer APIs, faster performance, and full API coverage.

CISA: HIGH-SEVERITY LINUX FLAW NOW EXPLOITED BY RANSOMWARE GANGS

CISA has added a 2024 use-after-free vulnerability to the known exploited vulnerabilities (KEV) list after it was observed being exploited by ransomware gangs. The vulnerability results from a decade-old flaw in the netfilter:nf_tables kernel component and can be abused by local attackers to escalate privileges to root.

ANDROID APPS MISUSING NFC AND HCE TO STEAL PAYMENT DATA ON THE RISE

Zimperium researchers discovered over 760 malicious Android apps exploiting Near-Field Communication (NFC) and Host Card Emulation (HCE) to steal payment data through NFC relay attacks, showing dramatic growth since April 2024. These apps impersonate trusted financial institutions and trick users into setting them as default NFC payment handlers, then use command-and-control servers to relay card terminal requests and exfiltrate EMV data to Telegram channels. The campaign has targeted over 20 institutions globally using 70+ C2 servers, primarily focusing on Russian banks but also affecting European banks, Brazilian institutions, and services like Google Pay.

YOU'LL NEVER SEE ATTRITION REFERENCED IN AN RCA

Public incident reports intentionally omit staff attrition as a contributing factor to reassure customers that issues are being resolved, since mentioning workforce issues could undermine confidence and create liability. Internal analyses also rarely consider attrition, focusing instead on technical details rather than organizational factors that increase system vulnerability. Attrition is like smoking and lung cancer - it's a risk factor that heightens the likelihood of failures without being necessary or sufficient on its own.

MOSIP ON AWS: TECHNICAL DEEP DIVE EXPLORING ARCHITECTURE, IMPLEMENTATION, AND DEPLOYMENT MODELS

AWS and Atos developed a cloud-based digital identity platform using MOSIP, addressing security challenges with multi-layered defenses like AWS Shield, WAF, CloudFront, segmented VPCs, and dedicated CloudHSM. It offers four hybrid deployment models for data sovereignty, from fully cloud to on-premises, with security controls such as data encryption, role-based access via OAuth2, and monitoring through GuardDuty and CloudWatch. Security teams should evaluate hybrid cloud architectures for sensitive government systems, implement defense-in-depth with hardware security modules, and use Infrastructure-as-Code for consistent security controls.

CAN'T HIDE IN 3D

Time-Terrain-Behavior (TTB) mapping can be used to transform logs and security events into a 3D landscape to create a visual threat landscape. The x-axis is set as the terrain layer and measures how many different tools detected an entity, the y-axis measures how many different time periods an entity was active in, and the z-axis measures how many different actions an entity performs. This post works through applying this methodology to the Splunk BOTS v2 scenario.

ORSTED C2

Orsted is a C2 framework that consists of multiple beacons that can communicate with each other and the main Orsted server.

USING GHIDRA TO PATCH MY KEYBOARD'S FIRMWARE

In this post, a researcher demonstrates firmware reverse engineering on the Epomaker Galaxy100 keyboard using Ghidra to bypass VIA configuration limitations and modify key mappings. The technical approach involved extracting firmware via DFU mode (Fn+L+Esc), setting up proper memory mapping in Ghidra for ARM Cortex-M3 architecture, locating USB HID keycode tables through pattern matching, and directly patching binary offsets to swap function key layers. Security professionals can apply these techniques for embedded device analysis, firmware modification workflows, and understanding how consumer hardware implements bootloader protections and keycode handling mechanisms.

REFLECTIZ (PRODUCT LAUNCH)

Reflectiz provides an agentless web exposure management platform that detects third-party tools and code risks, de-obfuscates suspicious JavaScript, and gives organizations centralized visibility and control over website activity and security compliance.

CHINA-LINKED HACKERS EXPLOITED LANSCOPE FLAW AS A ZERO-DAY IN ATTACKS

Chinese cyber-espionage group Bronze Butler (Tick) exploited CVE-2025-61932, a critical request origin verification flaw in Motex Lanscope Endpoint Manager versions 9.4.7.2 and earlier, as a zero-day vulnerability for several months before it was patched in October. The attackers exploited this vulnerability to achieve unauthenticated remote code execution with SYSTEM privileges, deploying an updated Gokcpdoor malware variant that features multiplexed command-and-control communication and DLL sideloading for evasion, along with tools such as goddi Active Directory dumper and 7-Zip for data exfiltration to cloud storage services. Organizations using Lanscope Endpoint Manager must immediately upgrade to patched versions, as no workarounds exist, while security teams should monitor for indicators of Bronze Butler activity, including Gokcpdoor malware, OAED Loader, and connections to ports 38000/38002.

ALLEGED U PENN HACKER CLAIMS THEY'RE IN IT FOR MONEY, NOT ‘PRIMARILY “ANTI-DEI”'

Hackers breached the University of Pennsylvania's systems, aiming to sell roughly 1.2 million lines of personal donor data. Unlike previous university hacks tied to diversity debates, this attack focused on financial gain, not ideology. U Penn is investigating and has involved the FBI as affected individuals have confirmed their stolen data.

METROPOLITAN POLICE HAILS FACIAL RECOGNITION TECH AFTER RECORD YEAR FOR ARRESTS

London's Metropolitan Police credits live facial recognition technology with enabling 962 arrests over the past year. While officials cite improved public safety and broad support, privacy advocates raise concerns about racial bias, noting 80 percent of false alerts involved Black individuals. The report claims these disparities are not statistically significant, yet critics argue for better oversight and legal safeguards to protect civil rights.

full study.

CLAUDE AI APIS CAN BE ABUSED FOR DATA EXFILTRATION

Attackers can exploit Anthropic's Claude AI APIs using indirect prompt injections to extract user data.

CYBERCRIMINALS EXPLOIT REMOTE MONITORING TOOLS TO INFILTRATE LOGISTICS AND FREIGHT NETWORKS

Threat actors are collaborating with organized crime groups to deploy legitimate RMM tools like ScreenConnect and SimpleHelp through spear-phishing and fraudulent freight listings to gain network access at logistics companies, enabling them to manipulate dispatch systems and steal physical cargo shipments, primarily food and beverage products.

ALLEGED JABBER ZEUS CODER 'MRICQ' IN US CUSTODY

Ukrainian cybercriminal Yuriy Igorevich Rybtsov, known as "MrICQ," was extradited from Italy to face charges for developing the Jabber Zeus banking trojan, which used man-in-the-browser attacks and real-time one-time password interception to steal tens of millions from US businesses through payroll manipulation and money mule networks.

POLAND HIT BY ANOTHER MAJOR CYBERATTACK AS HACKERS STEAL USERS' DATA FROM LOAN PLATFORM

Polish authorities are investigating a large-scale cyberattack that compromised personal data belonging to clients of the SuperGrosz online loan platform. Poland's Deputy Prime Minister Gawkowski reported that the attackers stole names, national identification numbers, ID card details, email and home addresses, phone numbers, nationality, bank account numbers, and other sensitive personal information. Affected users are advised to exercise caution, change passwords, enable 2FA, and use the government's mobile app to block their national identification number.

Get the guide [4] or try Loom for free.

US ADVERTISING SPILL CAN MAKE A MESS

US advertising spill now risks damaging Canadian brands rather than helping them. Decades ago, American ads that reached Canadian audiences offered free exposure and often aligned closely enough with local positioning to be beneficial. Today, US brands promoting “America First” messaging create tension when those same brands present themselves as “Proudly Canadian” north of the border. When corporate campaigns in the US focus on nationalism, the spillover can undermine local credibility and make Canadian consumers feel excluded.

YOUTUBE SHORTS NOW GENERATES MORE REVENUE PER WATCH HOUR THAN TRADITIONAL VIDEOS

YouTube Shorts now earns more revenue per watch hour than traditional videos. Strong ad performance, teen engagement, and higher conversion rates than TikTok have made Shorts a key growth driver alongside live sports and subscriptions. AI tools are improving content creation and shoppable video features, while direct response and retail ads led to a 15% rise in ad revenue.

AGENTIC MARKETING: INBOUND IS JUST THE BEGINNING

Agentic Marketing redefines the funnel as a connected system where marketing stays involved across the buyer journey. AI agents qualify and route leads across inbound and outbound channels based on behavior and context, from form fills and email clicks to webinar activity and dormant CRM records. The divide between marketing, SDRs, and sales fades as agents manage real-time interactions and optimize follow-ups. Adoption often starts with one touchpoint, like live chat or post-event follow-up, before scaling to full-funnel orchestration.

A CASE STUDY IN REDESIGNING NAVIGATION

The redesigned navigation for SFG20 increased SaaS demo requests by 38%. Simplifying the menu from 12 to 8 items improved usability and readability. The new design also led to a 35% increase in menu link clicks and a 12% rise in visits to key pages, including an 18% increase to “What is SFG20” and 52% to “Facilities-iQ.” The update reduced bounce rates and helped users better understand SFG20's offerings through clearer organization and storytelling.

REGEX IN GSC REVEALS CHATGPT SEARCHES

ChatGPT and its browser Atlas rely on Google searches to answer prompts, producing longer, more detailed queries that often focus on pricing, reviews, and product comparisons. These queries can be detected in GSC using regular expressions to filter by length, transactional or brand terms, informational prompts, or listicle mentions. GA4 can identify pages driving the most ChatGPT traffic, which can then be linked to long-tail queries. Extensions like GSC Helper and Better Regex simplify saving, filtering, and exporting regex patterns to analyze AI-driven search activity.

GOOGLE LOCAL SERVICES ADS VS. SEARCH ADS: WHICH DRIVES BETTER LOCAL LEADS?

Local businesses can generate leads through Google Ads using LSAs or traditional Search campaigns. LSAs offer quick setup with minimal management, relying on verification, accurate listings, and strong reviews. Google handles keyword matching, so tracking is key to gauge lead quality. Search campaigns provide greater control through custom copy, manual keywords, negatives, and bid strategies. They enable testing and segmentation but require more time and expertise.

DIARY OF A BRAND: MONCLER

Moncler evolved from a technical outerwear maker to a luxury brand by tying function to aspiration. CEO Remo Ruffini drove this through selective distribution and high-impact fashion events that placed Moncler among top houses. Its signature puffed design and the Genius platform, now a cross-industry creative hub, deepened cultural relevance. Moncler expanded categories and achieved top-tier margins by prioritizing brand perception over short-term gains.

HOW LOOM GREW TO 25M USERS WITHOUT TRADITIONAL MARKETING: PRODUCT-LED GROWTH MARKETING

Loom grew to 25M users without traditional marketing by making its product inherently shareable and easy to use. Its freemium model, Chrome extension, and built-in branding turned every shared video into a growth loop that brought in new users organically. The company's success came from smart positioning as a tool that enhances existing workflows rather than replaces them, appealing to knowledge workers in remote and hybrid setups. Its timing before the remote work boom and focus on friendly, simple design helped it become a $975M acquisition by Atlassian in 2023.