Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Over the years, the digital product landscape has become vastly more complex, the responsibilities of design systems have grown substantially, tooling has evolved and matured, and processes & organizational structures for managing digital products have grown up. The design system ecosystem of a complex organization takes the form of a delicious yet dense layer cake.
Six free books that reveal the best methods and techniques from the front lines of SaaS UI/UX design. Although not only written for designers, they include lessons on how to align design with business goals, UX research guidelines, remote work, and design processes.
Clone UI uses Tailwind CSS to generate components with simple prompts.
In the era of generative AI, UX designers must navigate complexity while ensuring user-friendliness. This article explores their role as guides through the chaos of generative responses, drawing inspiration from the enigmatic three-body problem analogy, where interactions can be as complex and unpredictable as celestial bodies.
Luzinterruptus is an anonymous art collective that uses light to bring attention to environmental and social issues. Its most impactful projects include a representation of the plastic surplus infesting cities around the globe, a dystopian future of the moon, and an installation that invites visitors to visualize the pattern of a cracked and dried Earth.
Designers can only design what users need through user testing. However, tight budgets and a lack of product culture present obstacles for many companies. There are usually five reasons why stakeholders and product leaders refuse to run user testing. This article outlines them and shows how to overcome each.
Chris Coyier explores a slightly unusual way to rearrange the layout of a website. It’s not supported yet by the major browsers, but that will change soon with the release of Safari 17.
Twice a year, Detroit hosts Middlecott Sketchbattle, a party with pumping music in a cavernous space where designers crank out automotive renderings. Known as the "The Fight Club of design," the event invites twenty designers to compete against the clock and each other. The sketching and rendering are old-school only, with no technological assistance.
After the State of JavaScript and the State of CSS, it's time for the State of HTML. Registration is open for the survey to measure awareness of new HTML features and browser APIs and help developers track how their usage is evolving. The final report will help browser vendors prioritize their roadmaps and work towards better compatibility.
Last week we flagged that Santandar was committing £100m to Spanish startups, now HSBC is weighing in on climate. It's looking to support climate companies that are focusing on EV charging, battery storage, sustainable food and agriculture, and carbon removal technologies.
Sales of “dumb phones” are on the rise, the count of apps in Apple’s App Store and Google’s Play Store are down 25%. As the appetite for tangible experiences grows, companies are popping up that help facilitate IRL interactions in order to get people away from their phones.
While a tad bit controversial, being a dual-threat CEO can be really handy. Understanding deals, talking with entrepreneurs, and seeing what is happening through deal flow is actually really beneficial for a CEO who is usually too in the mix of their own company.
“Don’t bring me problems, bring me solutions”. We all know it, but rarely do you hear it being said in an organization. Effective communication with your leadership is about acknowledging they have limited cognitive bandwidth and acting accordingly. If you’re at the top, this is a nice reminder to have empathy over what’s happening below.
Time spent on UX tinkering should be proportional to the level of conviction you have on your hypothesis. Have a launch checklist and allocate an overall owner for each one. Be patient - launches often take longer than forecast.
If you test a hypothesis and it fails, good, you can now try something new. If it only kinda works, you’re in this limbo state of deciding whether to double down and re-test or pull the plug. This is where time and resources go to die. Defining success and failure specifically and leaving little room for the inbetween is vital.
Going through an exit, whether positive or negative, is an emotional experience. You’re selling something you’ve likely poured years into, and it’ll never be the same again. Deciding when, and for how much, often comes down to trusting your gut.
We’re witnessing the convergence of SaaS and embedded finance. SaaS platforms are introducing financial services into their existing offerings, increasing their user LTV through stickiness, and unlocking new revenue streams.
According to data compiled by KPMG, investment dropped to £4.6 billion in the first half of 2023 compared to the £10.8 billion witnessed in 2022.
Peter Thiel (billionaire venture capitalist and co-founder of PayPal and Palantir) describes his framework for evaluating markets. Start small and expand.
The dust is settling around the excitement around generative AI, which means people are settling in to figure out how it can be useful in enterprise. Short story: it’s hugely beneficial. Long story: it’s going to take time.
Sponsored
Companies are using more external software than ever. Third-party risk is a key concern, and compliance frameworks like SOC 2 and ISO 27001 require a robust vendor management program. At the same time, the proliferation of SaaS and shadow IT
A new vulnerability was found in which GCC’s stack smashing protection has no effect on variable length arrays or buffers allocated with alloca(). The vulnerability targeted 64-bit ARM architecture. This article includes details about the vulnerability, a demonstration of the vulnerability, and a discussion of the response. A fix is available on the GCC mailing list.
Israeli tech firm Insanet has developed spyware capable of being delivered through online ad networks and infecting Windows-based computers and Android phones as well as iPhones. The "Sherlock'' spyware's deployment has raised concerns due to its ability to clandestinely infiltrate devices, monitor activities, and collect sensitive information. The Israeli government has approved its sale, which potentially puts many at risk.
The Gelsemium cyberespionage group, which has been operational since 2014, has been spotted in attacks targeting a Southeast Asian government. The group is known for its technical capacity and programming knowledge, which has helped them fly under the radar for many years.
Helpdesk operators are prime targets for exploitation. Recent breaches have highlighted the need for better defense against attacks on these targets. This post says helpdesk vulnerabilities are mostly tech and process gaps, not people. It covers attacker tactics and recommends processes and tech fixes to protect against helpdesk attacks.
This blog post from Elastic Security on leveraging call stacks to reduce false positives, reduce false negatives, and increase visibility. The post begins with an overview of what call stacks are, then discusses how to leverage them for event explainability and walks through examples of other detection use cases.
Microsoft added a tunnel feature to VS Code in July 2023 that allows users to share their Visual Studio desktop via the web. This is a prime utility for attackers to establish persistence. This article provides some methods to disable the usage of VS Code tunnel as well as some methods to detect its usage.
ExtractBitLockerKeys is a Powershell or Python script for system administrators or attackers conducting post-exploitation to extract BitLocker recovery keys from a domain.
donut-decryptor is a Python script that searches files for known indicators of the donut obfuscator’s loader shell code. If found, it will locate, decrypt, and parse the shell code, dumping any configuration data or modules to disk.
kernel-hardening-checker (formerly kconfig-hardened-check) is a tool for checking the security hardening options of the Linux kernel. It supports checking Kconfig options, sysctl parameters, and boot configs. The repository also contains a map of kernel configuration options and vulnerability classes.
Hex-Rays runs a contest every year to develop novel and interesting plug-ins for IDA. This year, 9 plug-ins were selected from the submissions, including tools to query ChatGPT, analyze functions, and generate unique URIs from disassembled code.
The GitHub Security Lab has reached the milestone of disclosing over 500 CVEs (records of security vulnerabilities) in open source projects. The Security Lab is a team of security experts who audit open source projects and help their maintainers fix vulnerabilities for free. They have reported and helped fix over 1,000 vulnerabilities with a fix rate of 96%.
The FBI claims that Beijing has a cyber espionage program that is larger than all of its major competitors combined. Even if every FBI cyber agent and intelligence analyst focused on China exclusively, Chinese hackers would still outnumber them by at least 50 to 1.
This post talks about how the "Verified Fan" sale that Ticketmaster is doing for the most recent Olivia Rodrigo tour tickets isn't working because scalpers have many accounts and credit cards to quickly buy tickets for resale whereas non-scalpers do not.
APT29, a Russian state-sponsored hacking group, has increased its phishing operations in Ukraine, particularly targeting foreign embassies in Kyiv. This follows an uptick in the group's routine espionage operations against global diplomatic entities, with a focus on European Ministries of Foreign Affairs and embassies, as well as governments in Turkey, India, and Africa.
The hackers who are believed to be behind a major cyberattack that disrupted several casinos and hotels in Las Vegas are part of a small but prolific cybercrime clique whose members have also hit other major U.S. companies in the past year by talking their way into access to computer networks.
TikTok and Google are reportedly exploring a partnership to integrate Google search prompts and potentially search results into TikTok's search stream. The move makes sense for both platforms, as Google seeks to maintain relevance with younger audiences who increasingly turn to TikTok for discovery. It also provides TikTok with more traffic to the app.
Amazon Prime Video will introduce ads for users in the US, Canada, Germany, and the UK starting in early 2024. In turn, they will charge an additional $2.99 per month for an ad-free experience. Amazon states this change is aimed at investing in content, acknowledging the expensive nature of Prime Video.
A high checkout rate indicates an efficient and user-friendly purchasing experience, which leads to more conversions and repeat customers. Brands can improve completion rates by simplifying forms and using inline validation, not forcing account creation, making pricing transparent from the start, allowing various payment methods, and showing clear and hassle-free return/refund policies.
This article delves into Miro's origins, its strategies in a competitive market, and tactics for scaling and community engagement. Miro’s growth is explained by 4 steps: following a bottom-up GTM playbook on persona-led marketing and end user centricity, crushing the 8 layers of the Product-Led Growth Iceberg, blending PLG with product-led sales, and leveraging powerful strategies powered by community.
This list is based on the AARRR (acquisition, activation, retention, revenue, referral) framework. It’s universal and fits every organization that works on customer-facing tech products. The post also notes that tracking every metric is impossible and advises to focus on a few metrics to succeed.
Retaining new users is critical to sustainable growth, but many marketers track it incorrectly. Retention metrics should be a true and predictive indicator of engagement. 5 common mistakes include defining the retention activity incorrectly, not measuring habitual frequency, only measuring paying user retention in freemium models, measuring retention for users who haven’t completed activation, and only measuring retention at the user level for a B2B product.
This article discusses internal practices and strategies employed by Google, shedding light on their approach to advertising, auctions, and competition with Apple. The topics discussed include the recent antitrust trial, the impact of new privacy regulations, the default search engine agreement between Google and Apple, and new competitors entering the market.
Google has posted over 30 announcements for Google Ads so far in 2023. Meta has released multiple changes this year to Facebook and Instagram ads. Some of the biggest announcements from Google include the launch of the Ads Transparency Center, deprecating most attribution models, and adding new brand restrictions for Search and Performance Max. For Meta, some of the major updates include adding conditional logic in lead generation forms, the launch of AI ads created just from text inputs, and the start of Tailored Campaigns on Facebook.
Many marketers consider backlinks critically important for SEO, but Google recently clarified that this is usually not the case.
Allowing customers to opt out of certain holiday promotion emails reduces unsubscribes and builds trust, leading to better long-term retention.
This article compares the number of users across major social apps. Facebook, YouTube, and Instagram lead with 3B, 2.5B, and 2B users respectively.
A think-piece post on the 4 step framework to get ahead of advertising—collecting data, and then housing, analyzing, and implementing it.
Sponsored
You wouldn't build a payment system or identity management from scratch. There’s an API for that! So why are you trying to build email, calendar, and contact management capabilities
Facebook receives billions of requests per second and stores trillions of items in its databases. Traditional web architectures couldn’t keep up with its demands, so the team used a simple key-value store called Memcached. The team scaled Facebook efficiently to become the largest Memcached installation in the world. This article describes how Facebook scaled Memcached across servers, clusters, and regions worldwide in a simple manner.