Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Annual Recurring Revenue (ARR) is a staple metric of investor expectations. Contracted Annual Recurring Revenue (CAAR) is being used more by founders to show unrealized revenue from committed contracts. It bumps the numbers, but it might leave you in hot water further down the line.
Truly great innovation comes in pairs. Technology innovation and business model innovation. They work together and deliver outlier results. AI is the next technology innovation, but have we found its counterpart on the business model side yet?
When it comes to AI and security, there is a significant amount of work and effort required. This article breaks down the risks and challenges and looks at the opportunities for companies in this new world order.
Remote can be anywhere that inspires you to work at your best.
“Under-promise and over-deliver” - how many times have we heard that? The mantra is focused on ensuring you only take on enough work that you can really do justice. But are you in danger of being seen as a slacker? There’s a balance somewhere.
The incorrigible Jason Fried of 37 Signals gives his take on culture and how to view it around the things that have happened around a 50-day rolling window. Best quote: “Culture is the nonfiction story of an organization. It writes itself.”
Hackers are using a massive network of fake and compromised Facebook accounts to send out millions of Messenger phishing messages to target Facebook business accounts with password-stealing malware, ultimately compromising one out of every seventy accounts targeted.
Wyze alleges that a “web caching issue” led to a period of 30 minutes where owners of Wyze cameras logged into the web portal were able to view other users’ cameras. The site was quickly put into maintenance mode to fix the issue.
Hackers stole $41 million worth of cryptocurrencies from Stake.com, an online casino and sports betting site. The FBI has attributed the attack to North Korea's Lazarus Group. The Lazarus Group is known for high-profile hacks worth over $1 billion. It is responsible for stealing over $200 million in crypto this year alone.
The Amazon Search team needed to build systems that could withstand Prime Day levels of traffic at 84k requests/second. It heavily utilized Chaos Engineering to test fault tolerance to ensure system stability. This post discusses the Chaos Engineering Orchestrator the team built as well as general Chaos Engineering methodology.
This article explores the multifaceted landscape of safeguarding data, identities, networks, and services in cloud environments. The key security considerations discussed include data vulnerability, identity and access management, vulnerability management, and cloud service provider evaluation. The article also talks about employee training and awareness, continuous monitoring, and incident response.
Large language models present security and privacy risks that must be addressed when implementing them in an organization. This guide explores the top risks and strategies to mitigate them. Top risks include supply chain vulnerabilities and overreliance on LLM-generated content. Mitigation strategies include implementing strict input validation, data sanitization procedures, and rigorous data validation and cleaning processes.
A collection of tools, tutorials, and other resources for the Flipper Zero hacking tool.
A yara ruleset from Sentinel Labs to detect potentially malicious code in macOS samples.
AttackGen uses a Large Language Model via LangSmith and the comprehensive MITRE ATT&CK framework to generate tailored incident response scenarios based on user-selected threat actor groups and organization details.
An article bringing awareness to the mental health challenges that cyber professionals face. The article includes statistics and testaments that discuss the elevated levels of stress that many employees face and includes some ways that organizations are seeking to combat it.
HijackLoader is a modular malware loader known for its evasion techniques and flexibility in loading malicious payloads. While it doesn’t possess any advanced features, it uses various tactics, such as syscall evasion and delayed code execution, to avoid detection by security solutions.
New research by Sonatype shows that 97% of surveyed developers and application security leaders are using generative AI in software development. 74% of respondents feel pressured to use AI, despite the security risks associated with the technology.
Spurred on by the Russia-Ukraine war, hacktivism is making a comeback. This article analyzes the current state and likely future of hacktivist activity.
For over three years, the download site freedownloadmanager[.]org surreptitiously distributed malware to Linux users by occasionally redirecting them to a malicious domain.
Hotel and casino giant MGM Resorts has confirmed a “cybersecurity issue” is to blame for an ongoing outage affecting systems at the company’s Las Vegas properties.
TikTok Shop allows users to discover and shop for products directly within the TikTok app, with shoppable videos and live streams integrated into users' feeds. It offers tools for businesses to create custom product collections, a shop tab, and product recommendations. Additionally, the TikTok Shop Seller Center app allows merchants to connect directly from other e-commerce platforms like Shopify and Salesforce.
Instead of simply submitting a suspension appeal to Google Ads, some advertisers will need to go through a verification process to be allowed to submit an appeal. Advertisers on monthly invoicing are exempt, and can directly appeal their account suspension. This rolls out on October 10, 2023.
Simple and familiar homepage designs are better for customer experience and conversions than overcrowded and unconventional designs. This article covers 5 tried-and-true design layouts with examples.
Customer Success is a goldmine of knowledge that often gets overlooked by marketers. Build alignment by creating an FAQ list where CSMs add real questions from customers on an ongoing basis. Then, work with them to turn each of those questions into content that addresses those issues.
A new report based on survey data from social media users and marketers shows that the most common reason for following a brand is to stay informed about new products or services. Additionally, users say the most memorable brands are those that respond to customers on social media. The report includes additional insights about AI use and content preferences.
Micro-influencers typically have up to tens of thousands of followers and are leveraged by brands to foster trust and close connections with their audiences. They’re often more cost-effective than mega-influencers. This guide covers the benefits of teaming up with micro-influencers, how to find the right ones to work with, and 7 brands that stand out in the micro-influencer landscape.
Unsolicited Feedback is a new podcast that invites listeners into closed-door conversations between growth and product leaders. It has an impressive upcoming guest list that includes former and current CPOs at Dropbox, Color, Atlassian, and Eventbrite.
This X thread outlines in detail how an agency dealt with one of the worst SEO cases they’ve ever seen.
Pricing a product can be challenging. This author shares a tactic called “door-in-the-face” pricing test that taps into consumer pricing psychology.
Gen Z students prioritize budget-friendly pricing when choosing streaming services with 93% saying that price is the ultimate deal-breaker.
Slack handles billions of inbound network requests per day, all of which traverse through its edge network and ingress load-balancing tiers. This blog talks about how a request flows — from a Slack user’s perspective — across the vast ether of the network to reach AWS and then Slack’s internal services. Slack uses websocket connections for sending and receiving messages and edge APIs for everything else.
Event-driven architectures are popular with data-intensive workloads and cloud computing. This article delves into why event-driven architectures came to be and the benefits of using them. Companies like Netflix, Uber, and Dropbox utilize them due to their scalability. The article shows off common design patterns within such architectures and the challenges that come with using them.
This article, by an ex-startup CTO and manager of a large high-growth company, discusses the topic of balancing roadmap work with unexpected opportunities/issues. It does this by dividing software work into four types - business planned (roadmap), business unplanned (unanticipated opportunities), maintenance planned (bugs + small changes), and maintained unplanned (hot fixes & incidents). The author recommends allocating 50% for business planned, 30% for business unplanned, and 20% for maintenance planned.
Microservices can introduce unnecessary complexity to codebases. There’s nothing inherently wrong with a monolithic architecture. For example, Shopify is still a Rails monolith, leveraging the tried and true Resque to process billions of tasks. It’s important to keep the end product in mind first. Architecture should follow the product needs and not vice versa.
Sponsored
Embedded analytics tools are clunky and inflexible, building bespoke analytics is tedious and expensive. EMBEDDABLE IS REINVENTING CUSTOMER
Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In Quiet, all data syncs directly between a team's devices over Tor with no server required.
LLMonitor helps AI devs monitor their apps in production. It features cost, token, and latency analytics, along with traces for easy debugging. LLMonitor can be used with any model and is simple to self-host.
The iPhone 15 has a new design featuring a durable, color-infused back glass and new contoured edge, the Dynamic Island, a 48MP Main camera with 2x Telephoto, and USB‑C. Pre-orders begin Friday, September 15, with availability beginning Friday, September 22. This is the first iPhone that supports USB-C instead of Lightning.
Earthly CI is shutting down. It was a platform that allowed builds to be parallelized, making them much faster. Unfortunately, it never reached the traction that Earthly expected. People already using Earthly’s other products were unwilling to switch over. New customers to Earthly CI weren’t the right customers the company wanted. The article goes over the lessons learned from building and shutting down Earthly CI.
Chrome extensions to make your life as a web dev easier, such as a smart color picker and JSON viewer.
The creator of Django recently created a new blog using Django - these are some of the notes he took while doing so.
A Stack Overflow commenter gives some ideas on how to mitigate Stack Overflow’s traffic decline. Stack Overflow mods respond.
Sponsored
Developers want to build products, not tinker with screenshots and spreadsheets for audits. Luckily, Drata's platform experience
Walter Isaacson's biography of Elon Musk is set to be published today. This article contains a story adapted from the book about how X moved its server farms from Sacramento to Portland. Musk's advisors told him that it would take many months to move the servers, but Musk decided that they were wrong and opted to move the servers using cheap contractors. They managed to move the servers in under a week, but the exercise destabilized X for the next two months. Musk later admitted that the rushed move was a mistake.
Nvidia says that TensorRT-LLM, an open source software library, will double the H100's performance for running inference on leading large language models. The software is now available in early access. It will be integrated into the Nvidia NeMo LLM framework as part of the Nvidia AI Enterprise software suite when it is released to the public next month. TensorRT-LLM will also support Nvidia's A100, L4, L40, L40, and Grace Hopper Superchip GPUs.
A team of German physicists has figured out a method for writing on water. The method involves putting ink directly into water using a microbead made of an ion-exchange material as a pen. The bead writes by altering the local pH value of the water, attracting ink particles to those areas. The method is at a proof of concept stage - future iterations may be able to generate highly complex patterns in fluids. Examples of images drawn in water using the method are available in the article.
Researchers from UC Santa Barbara have developed a technique that can read letters through walls with Wi-Fi. The technique focuses on tracing the edges of objects. It is able to capture details not previously possible with other Wi-Fi imaging techniques. The approach may open up new directions for Wi-Fi imaging.
Sponsored
If you’re using Windows Server 2012, you know that surfacing resource utilization data isn’t always easy. With Datadog’s handy cheatsheet
Google Domains was one of the most popular domain registrars, with 10 million domains registered globally. Users who do nothing will be migrated to Squarespace. Domain names are easily transferable, so users have a choice of where to transfer their domains to. This article looks at which domain registrars other techies recommend. It provides an overview of each registrar with an analysis of their offerings.