Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
UX professionals are cautiously optimistic about integrating AI into their workflow. Risks are a concern, and they expect appropriate regulation to mitigate them. There still needs to be more clarity on ideal use cases, which makes designers expect their organization to invest in education on the subject.
1 in 4 adults in the US lives with some disability. Accessibility is also increasingly becoming a legal issue, with many countries demanding by law that products cover a wide range of users. The four pillars of accessibility: perceivable, operable, understandable, and robust, provide an excellent starting point for enabling designers to produce more inclusive artifacts.
Lazy loading is a technique for loading web pages faster, but it can hurt sales performance if there's no thoughtful process for defining how images should be presented to users.
Coca‑Cola Y3000 Zero Sugar is a limited-edition beverage co-created with artificial intelligence. Its futuristic name says the year 3000, but its marketing relies on AI-generated imagery from 2023 — courtesy of the controversial image synthesis model Stable Diffusion.
BlockFace Kit, a modular stamp set, plays with elemental shapes that invite creativity and imagination in physical typography without requiring the space for large sort drawers or expensive presses. The complete kit comes with a magnetic case, black and red ink pads, and a printed manual that teaches six styles: Bauhaus, lowercase, slab serif, Grotesque, Standard, and curved.
The 45th edition of the World Illustration Awards received more than 5,000 entries from 84 countries. This year's winners have been announced. These fantastic 22 illustration pieces reveal their talent.
Despite global fintech funding being down 84% YoY, French fintech Swan bags $40m to scale their embedded banking services across Europe. Hope for fintech and Europe?
FTX has been given approval to liquidate its assets in order to begin paying back its users in USD. However, it still has a lot of assets. How will this liquidation impact the crypto market as supply floods the market?
Xbox has launched the Xbox Mastercard in collaboration with Barclays. The Xbox Mastercard is a rewards card that players can use to earn points through everyday purchases to redeem on games. Wasn’t it Angela Stange who said in 2019 that every company will be a fintech company?
If you have a Chief People Officer who is overly focused on the transactional parts of their operations, like payroll and benefits, doesn’t speak up in executive team meetings, and has morale or turnover issues in their own team, you’ve got big problems.
Leadership is challenging, but getting advice from experienced peers and investors makes the job much easier. The key to getting the most out of advice is considering the situational context around the advice and maintaining enough humility to properly receive the advice.
As founders, we can often get lost in the to-do’s. The details of these tasks consume us. Here’s a nice reminder to reflect on the real goals of life, which often don’t involve money. It’s about the people you retain and live with along the way.
This is a fascinating read that argues how investors behave around new technologies. Without benchmarks and historical insight, investors will revert back to founder-market-fit, using signals like pedigree and education. A canonical example of this is the amount of researchers and PhD wielders that have been recipients of the latest AI funding boom.
A healthy reminder that as a founder you’re going to be banging your head against the wall almost daily. How you handle the bumps and continue on course matters.
Qui-Gon Jinn nailed it, your focus determines your reality.
All exceptional startups have some things in common: an exceptional CEO, executive team, investors, talent, and product.
Sponsored
If compliance matters to your organization, it can’t be an afterthought. Modern GRC teams shouldn’t be scrambling to collect evidence and generate reports before an audit. What’s the alternative? The best organizations partner with Drata
Meduza co-founder Galina Timchenko's phone was infected with Pegasus spyware, making her the first Russian journalist to be targeted. The software is marketed exclusively to state clients for use against criminals, but has been used to target journalists, activists, and politicians around the world. Meduza worked with experts to investigate the attack and learn which states may have spent millions of dollars to hijack Timchenko's phone.
Cybercrime crew BianLian says it has broken into the IT systems of top nonprofit Save The Children and stolen a ton of files, including what they claim is financial, health, and medical data.
A new phishing campaign is sending malicious attachments that install the DarkGate malware loader via Microsoft Teams. The article contains more details about the obfuscation and detection evasion mechanisms that the malware uses.
A very thorough tutorial on the unintuitive process to enforce DNS name constraints in an AWS private CA. The post includes sample code and tests to verify the constraints.
Akamai details the newly released CVE-2023-3676 which is a command injection vulnerability in Kubernetes on Windows hosts. This article details the vulnerability and provides a proof-of-concept YAML file, a method to check if you’re vulnerable, and an OPA rule to block the vulnerability.
This article comprehensively discusses the risks associated with building product features using third-party Large Language Model APIs and offers controls available to mitigate these risks. The article also suggests traditional governance, risk, and compliance controls, as well as provides a lot of reference material on the topic.
NTLM over SMB is commonly used when attacking Windows domains in attacks such as pass-the-hash or password cracking. In a new update, Windows 11 will allow administrators to block NTLM responses over SMB to prevent hashes being leaked to external servers. Previously, the only way to achieve this was to disable NTLM completely
Google has announced that all Chromebooks will receive regular automatic updates for 10 years, making them the most updated operating system available. The platform encourages the use of renewable materials, with plans to use more post-consumer recycled materials for future models. The company also aims to make repair processes quicker and more energy-efficient with new features such as adaptive charging and battery saver.
CyberCatch has launched an SEC Compliance Manager solution to enable compliance with the SEC's new Cybersecurity Incident Reporting and Risk Management Rule. The new rule mandates reporting and disclosure of a material cybersecurity incident within four business days and disclosure of cybersecurity risk management, strategy, and governance, including board oversight over cybersecurity risk management.
CISA has released a roadmap outlining its Open Source Security strategy. The roadmap outlines what CISA’s role is in the space, how CISA plans to outline key dependencies, and how CISA plans to reduce risk to the government and consumers.
A significant vulnerability in the WebP Codec affecting the heap buffer overflow has been unearthed, prompting major browser vendors, including Google and Mozilla, to expedite the release of updates to address the issue.
The Sonar Research team discovered and responsibly disclosed code vulnerabilities in Skiff's web client that would allow attackers to steal decrypted emails and impersonate victims if they interacted with malicious messages. This article provides technical details of the vulnerabilities found and advice on how to avoid such vulnerabilities in code.
Retool faced an unauthorized access issue involving 27 cloud customers due to a spear-phishing attack via text message. The breach started with an employee's compromised Google account, underscoring the need for employee training and strong defense measures.
The ALPHV/BlackCat ransomware group took responsibility for the MGM Resorts cyber outage on Tuesday, claiming that the conversation that granted initial access took just 10 minutes.
With an unprecedented 70 zero-day vulnerabilities uncovered so far in 2023, apps are being patched at a rapid rate. Apple, Microsoft, Google, Mozilla, Adobe, and Cisco have all been affected, and this month the number of zero-days tracked has been considerably higher than the monthly average.
Sponsored
Mark your calendars for September 21 & 22 in San Francisco, as the Developer Marketing summit
Users and companies on X will soon be able to include more detail in their profile section. A “View more” prompt will sit beneath the bio summary. This could also eventually lead to a bigger information panel incorporating shops, job listings, and location info.
Google has begun to push out an update to its helpful content algorithm, which specifically targets content that was primarily created for search engines rather than people. Google wants to reward better and more useful content that was written for humans and to help users. The update started on September 14 and should take about two weeks to fully roll out.
Instead of putting remarketing spend on all unqualified site traffic, Impactable used LinkedIn Ads remarketing to qualify, segment, and convert customers. It created LinkedIn audiences of users who visited its site and built a qualifying layer on top of them to only display ads to relevant segments. After 6 months, Impactful saw a 10% increase in conversion rate and a 40% reduction in cost per conversion.
A website owner increased CTR on a page by 900% by changing the title tag. The page ranked first but had a poor CTR of less than 1%. The title tag closely resembled the pages ranking beneath it, so they added a few extra words to make it stand out. The page maintained its ranking and saw an immediate increase in CTR.
Customer marketing can increase brand loyalty, turn customers into advocates, and provide social proof, making it integral to brand growth. Brands like Aerie and Glossier utilize user-generated content to make customers feel seen and connected. McDonald's demonstrates a deep understanding of its audience through relatable content and posts, while Zara's diverse creators highlight products in authentic ways.
E-commerce sites will now have more insights into their visibility within Google’s Shopping tab. The enhanced reports will allow site owners to get notified when SKUs are no longer eligible to appear in the Shopping tab. Additionally, they will provide recommendations to improve the visibility of products.
Startups should reconsider prioritizing SEO since it may lead to unrealistic expectations due to its top-of-funnel focus. Unless the startup's strategic goals align with SEO outcomes and they have long-term objectives, investing in SEO is not likely the best choice. Alternatively, paid advertising campaigns can offer quicker results, adding users and revenue that can support the funding efforts in a resource-constrained environment.
The TikTok Ads library is an open book of information about what’s hot for advertisers on the platform. It is also a useful tool to discover new audience demographic combinations to target. This post shares 11 tips to stand out from the competition and squeeze the most out of your TikTok Ad spend.
A page’s target keyword should be used in the first 100 words, in image alt text and/or file name, and in headings.
Amazon launched new search and discovery tools for its mobile app, including multimodal search, expanded augmented reality features, and "Find-on-Amazon", a tool that identifies products from photos shared through the app.
A think-piece that argues the cultural problem in B2B is the resistance to change and the adherence to outdated models of sales and marketing.
Instagram went from 0 to 14 million users in just over a year and it did it with only three engineers. Its tech stack was surprisingly simple, using AWS extensively and a monolithic Django backend. It also used various caching tools like Redis and Memcached for better performance as it scaled. This article provides a visual explanation of Instagram’s tech stack by walking through the architecture using the life of a request.
Geolocation is the process of mapping IP addresses to a geographical location defined by latitude and longitude. There are many use cases for geolocation intelligence that are demanded by online businesses and service providers. This tutorial goes over building a geolocation database from scratch, with deep explanations and code examples along the way.
Without any guidelines, it can be difficult to write effective tests. In fact, testing code can become more complex and harder to maintain than the actual production code! These best practices for unit testing will help you to write lean, accurate, and easy-to-read testing code.
This article details one engineer's experience working with Meta and how they increased their compensation from $390,000 in 2017 to $823,000 in 2021. It covers their actions throughout the years and discusses the main lessons learned. The article discusses how to become a high earner and provides direct advice on how to achieve similar levels of success.
On average, code is stuck in review for five days (or a full workweek), creating significant dev bottlenecks, unhappy developers, and hits to the bottom line. This article offers ways to relieve code review bottlenecks.
ElectricSQL is a local-first sync layer for web and mobile apps. It allows developers to build reactive, real-time, local-first apps directly on Postgres. The resulting apps have full-featured multi-user collaboration and conflict-free offline support.