Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
This blog shows several different heatmaps of DAI token transfers and explains how other developers can replicate the method for any ERC20 token transfers. The approach utilizes Python tools like jupyter, cryo, polars, matplotlib, datashader, and altair to render billions of data points and properly display massive datasets. The process makes it much easier and quicker to generate understandable visualizations of crypto transactions.
The Winklevoss twins, co-founders of cryptocurrency exchange Gemini, reportedly withdrew $280 million from Genesis just months before the company's collapse. It's unclear whether the withdrawn funds were Gemini's corporate assets or the personal cryptocurrencies of the twins. The timing of the withdrawal, months before Genesis froze customer withdrawals, raises questions about the Winklevoss twins' knowledge of Genesis' financial situation.
Valkyrie's Bitcoin Strategy ETF has successfully added ether futures contracts. Effective on October 3, the fund will formally alter its investment strategy, resulting in a name change to Valkyrie Bitcoin and Ether Strategy ETF. Other ETF issuers are expected to follow and launch their own ether futures offerings. Valkyrie's amended approach could allow them to launch earlier compared to proposed issues from other platforms.
Casey Rodarmor provided an update on the new Runes protocol he suggested. This repo provides a way to mint runes. Rodarmor warns that runes below certain block heights will be ignored as the standard hasn’t been formalized yet.
This blog explains how Fred Wilson, a renowned investor and crypto veteran, fell victim to an NFT scam that resulted in the loss of 46 of his NFTs.
Ethereum developers have made a successful second attempt at launching the Holesky test network for the Ethereum blockchain, which is aimed at testing ambitious scaling plans and addressing testnet ETH supply issues.
This dashboard depicts interesting info about censorship on Ethereum, a critical piece of how Ethereum works. At its different layers, Ethereum users can experience censorship from builders, relays, and validators. This dashboard helps visualize where that is happening.
Photoshop for the Web is now available after being in beta for almost two years. Featuring Firefly-powered AI tools, its AI capabilities include generative expand, which lets users expand an image and fill it with content based on a prompt, and generative fill, which can add or remove objects while keeping the original context of an image.
Paint Cocreator is an AI-enhanced version of Microsoft Paint that allows users to create prompt-based art. Powered by DALL-E, the new AI functionality enables creatives to apply art styles and add layers to the initial composition. Paint Cocreator should be available to all Windows 11 users in a few weeks.
Figma has partnered with Google for Education to provide K-12 schools in Japan with access to Figma and FigJam through Chromebooks and Google Workspace for Education. The goal is to foster design skills and creativity among students, preparing them for future job opportunities in a digital world while also aligning with Japan's commitment to education access and equity.
Once we understand three key aspects of time management for creatives, it suddenly stops being such a challenging topic. First of all, we are creatives who feel like our work is never done. We also need uninterrupted blocks of time for work (and don’t get it). Finally, people often don’t fully understand the design process.
A color ramp, also known as a color scale, is a visual representation of how colors transition from light to dark smoothly and continuously. The steps required to create a color ramp are: start with your defined brand colors, adjust lightness at each color stop, adjust saturation as needed, check contrast ratios, repeat for all other colors, and aim for similar lightness and saturation for each stop as the other colors.
Accessible forms unlock new audiences and improve the user experience for all users. Equipping fields with autofill, investing in well-designed error messages, and tweaking date fields are minor adjustments that lead to more accessible forms.
A tool to generate free high-quality images and illustrations on demand powered by the world's most creative image generation AIs. Users can choose the desired style and edit the image after it’s generated.
Alpaca, an AI plugin for Photoshop, can generate images and convert sketches into detailed images. Artists can start with sketches and reference images to guide the composition of their artwork. This feature allows users to draw an image, import it, and then generate a detailed image from the sketch.
This landing page collection features screenshots and notes by the experts who designed it. The project focuses on conversion optimization and highlights the design decisions that drive more sales.
In the not-so-distant future, voice-activated AI chatbots will be able to understand diverse accents and languages, making technology more inclusive and universal. This evolution will be coupled with the capability to sense emotions from our voice's subtle cues, creating more empathetic digital assistants.
Neocities’ replication of old Google homepages allows users to experience the search engine from 1998, 2009, 2011, and 2013, when the major visual changes were introduced. The webpage accurately emulates how Google Search used to look back in the day, complete with the drop-down menu to choose the number of results to display per page and the “I’m feeling lucky” button.
Google states that web page usability and content quality are key factors that determine page ranking. Creating user-centered and well-structured content, focusing on findability, having a mobile-friendly UI, and having fast loading times are UX improvements with the most direct impact on SEO.
A gigantic minority of one billion people experience some form of disability and are often let down by design. Multiple aspects can improve their lives. Maybe you could add better color coding to your product. Your typography may lack legibility. Or do you need to genuinely explore options for allowing users to customize their purchases? No matter what the improvement is, the important thing is to start now and generate the momentum that triggers continuous inclusive design initiatives.
Strava users can now seamlessly synchronize their Nike Run Club (NRC) and Nike Training Club (NTC) activities with their Strava accounts. The new integration will make it easier for athletes to monitor their progress and achievements across platforms.
Textareas are great when it comes to accepting a large amount of text from the user. However, the problem with them is that they have a fixed height, which has a detrimental impact on accessibility and usability. Thankfully, an experimental CSS rule with a form-sizing property is coming that will allow the increase of the height of textareas automatically based on the amount of text the user enters.
India has a population of 1.4 billion. By 2041, 59% of the population will be of working age. That’s a huge workforce. The government has been investing in tech, and large VCs are propping up in the region. This deep-dive on eight startups showcases the innovation coming from the Indian ecosystem.
AI, combined with hardware, is going to enable groundbreaking forms of virtual and augmented reality. Here’s a breakdown of the latest news in each of those domains.
Generative AI is reshaping the traditional value placed on vast data collections. The uniqueness and importance of proprietary data may be waning as large language models can be fine-tuned with minimal data and even generate synthetic datasets.
The prospects of internationalization at your startup are exciting. Bigger TAM, new revenue, risk diversification - but often there’s a misalignment between internal buzz and external traction that’s explained by a lack of preparation. International expansion is a strategy, not a quick tactic.
Regardless of the seniority of the Chief People Officer, have them report to you. This signals that the founder/CEO cares intimately about the needs of employees and keeps you connected to the culture and general vibe.
This blog post features several AI SaaS use cases for various departments, highlighting ways the technology can be used to gain a competitive edge.
Startups are an excellent environment to learn and build generalist skill sets, but they’re financially risky and stressful. Big Tech enables you to build a specialism and a financial buffer, but you’ll have to deal with bureaucracy and a lack of purpose. Written from an engineer's perspective.
Your biggest challenge evolves as the company grows, from finding a co-founder to simply sticking to it and launching new products in order to expand your TAM.
AI is making it easier to craft emails. Sales teams are using tools to find leads and outbound them more easily than ever. The signal-to-noise ratio is going to grow. This automated future raises all kinds of questions for businesses and the role crafted emails will play in it.
Default to trusting your customers. The goodwill it brings is worth the loss from bad actors.
There are many methods for note-taking, from transcribing every call to archiving everything in Notion. Often, the simplest solution scales. Have a doc for daily notes and one for each individual you interact with regularly.
Fake websites have been popping up that offer a Trojan masquerading as the Bitwarden password manager that includes a new password-stealing malware dubbed ZenRAT. The malware specifically targets Windows devices and directs macOS or Linux users to the official download page. The malware uses WMI queries to acquire system information in addition to the credentials and sends them in a zip to a C2.
Operation Zero, a Russian company specializing in buying and selling zero-day software exploits, has increased its payments for zero-day vulnerabilities in iPhones and Android devices from $200,000 to $20 million. While traditionally, bug bounty platforms inform vendors of vulnerabilities, companies like Operation Zero sell these vulnerabilities to governments, leading to a lucrative yet unregulated gray market where prices and customer identities remain opaque.
A threat actor is using an alias of GitHub’s Dependabot feature to install password-stealing malware. By mimicking the Dependabot, which automatically scans projects for vulnerabilities, the attacker has convinced users to accept malicious commits.
An article providing an overview of some Okta features that are useful for red teaming. The first portion of the article discusses features that allow running Okta with Active Directory environments and how to pivot between the two. The article also includes a discussion of using a fake SAML provider with Okta.
MadPot is a large-scale honeypot network that Amazon runs to catch threats and gain threat intelligence which it shares publicly or with government agencies. MadPot intercepts over 100 million attempts per day and the insights can feed into AWS to bolster their threat detection and prevention offerings such as GuardDuty.
This document provides an overview of how WebGPU works through the eyes of an attacker, discusses vulnerability research methodologies, and describes important bugs found during the research. The report aims to give the security community a deeper understanding of vulnerabilities that may come with the addition of WebGPU.
LDAPWordlistHarvester is a tool for generating wordlists from information present in an LDAP for cracking non-random passwords of domain accounts. Once you have the wordlist, you can use hashcat with rules to crack passwords.
The Cybersecurity and Infrastructure Security Agency has launched a nationwide cybersecurity campaign called "Secure Our World". The campaign is part of CISA's Cybersecurity Awareness Program, which aims to raise public awareness of cyber threats and online security.
GitHub has made passkeys available to all users on its platform, following the successful beta launch in July.
An unknown party submitted a large number of backdated CVEs with high CVSS scores. The problem with this is that a researcher has found that many of these are just automatic submissions that are not actually vulnerabilities. This could cause issues when these CVEs are pulled in by systems that don’t check whether they are disputed.
A ransomware group named Ransomed.vc claims to have breached Sony's systems and has threatened to sell the stolen data. Although the claims remain unconfirmed, Cyber Security Connect reported that the group provided evidence such as screenshots of internal pages and Java files.
Potential iCloud Keychain issues have been identified by security researchers in iOS 17 and macOS Sonoma. The first problem is that the feature may automatically activate upon upgrading, even if it was previously turned off. The second issue is that if users disable iCloud Keychain, the data might not be deleted from Apple's servers, contrary to past practice.
The next generation of Raspberry Pi will be released this October and features 2-3x the speed of the previous model.
Roughly 80% of the staff at US cybersecurity agency CISA may be furloughed if a government shutdown occurs this week. While some personnel involved with cybersecurity operations are likely to be classified as essential and exempt from furlough, there will be fewer staff available for security monitoring and response.
Misconfigured instances of third-party data logging application TeslaMate may potentially expose Tesla cars and their drivers to malicious attacks, according to IoT security intelligence firm Redinent. While TeslaMate is a useful tool for tracking car data, it poses a significant risk if not properly configured.
Reddit is removing the option for users to opt out of personalized ads based on their activity, sparking privacy concerns. Additionally, it launched the Contributor Program, enabling users to earn money based on their karma similar to X's ad revenue sharing program. This has raised concerns about encouraging lower-quality content.
In a move against AI bots, web publishing platform Medium joined other media outlets in blocking GPTBot. It is also working to form a coalition with other platforms to address the challenges posed by AI crawlers.