Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
This thread goes over a user’s month-long experience with Friend.tech. Describing initial reservations about the platform's commoditized access to people's thoughts and content, the author found merit in Friend.tech’s unique interactive, intimate, and thrilling approach. He expresses positive sentiment towards the platform's innovative creator-trader-fan dynamics, remarkable growth (TVL at $18m), potential mainstream appeal, and efficient user experience.
This thread dives into why LSTs getting to 33% staking share can lead to disruptions in the network. It discusses how blockchains operate on peer-to-peer consensus systems and the need to account for potentially malicious nodes. The calculation n >= 3f + 1 helps ensure system stability, where n is the number of nodes, and f represents faulty nodes. Essentially, to maintain operational integrity, no party should control more than a third of the stake.
Owners of Nouns are opting for a "rage quit," a move reflecting their dissatisfaction with the project. Instead of selling their NFTs on the open market in the middle of a bear market, they are seeking a better price from NounsDAO's Ether token reserve. This step, resulting from newly enacted rules, allows 20% of NFT holders to split from the group and claim their share of the project's 30,620 Ether tokens, worth about $50 million.
The FTX estate has filed a lawsuit against LayerZero Labs, aiming to reverse a $45M agreement made days before FTX's bankruptcy. The lawsuit claims that several transactions involving equity stakes and tokens were fraudulent due to FTX's insolvency at the time. Additionally, FTX is seeking to reclaim over $40M in withdrawals by LayerZero and its ex-COO before the bankruptcy. The decision seeks to benefit the creditors of the bankrupt estate.
In this thread, Punk6529 gives his perspective on bear markets after having gone through several of them. He emphasizes that this is the time to learn and connect with other genuine builders and artists.
Coinbase Ventures invested in six projects from its Base Ecosystem Fund: Avantis, BSX, Onboard, OpenCover, Paragraph, and Truflation.
Vitalik Buterin's X account was allegedly hacked, leading to over $691,000 in losses for victims who clicked a malicious link.
Coinbase CEO Brian Armstrong discusses Base and other potential future projects in this interview with Yahoo Finance. He emphasizes the need for regulatory clarity in the crypto industry and believes crypto will be a significant topic in the 2024 US presidential race.
Hexee presents itself with the ambitious goal of replacing all the other color tools. Its features include contrast checking, color blindness verification, palette management, and gradient creation.
UX research requires knowledge and understanding of many jargon terms. Use this glossary as a reference as you delve into research.
Disc Conf 2023 is now open for registration. Product experts from Google, Notion, Figma, Microsoft, and Shopify will share their thoughts on discovery, design, and research on September 19th. The event is free and includes recordings.
LLMs are amazing, but they require immense amounts of hardware. For this reason, the software will evolve to have a hardware architecture where some of the model is processed on the computer and some in the cloud.
While we focus on founders here, it is helpful to see how VCs think, especially over the long haul.
Failure isn’t a word that should be in your vocabulary if you want to become the best version of yourself.
North Korean threat actors have been targeting security researchers for the past two and a half years using 0-day exploits. Google’s Threat Analysis Group has tracked and disrupted campaigns from these actors and recently discovered a new campaign likely from the same actors. The threat actors used social media sites to build rapport with their targets before sending a malicious file that contained at least one 0-day in a popular software package.
Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals user messages, contact lists, and other data.
Advanced Persistent threat actors were found to have exploited two vulnerabilities, CVE-2022-47966 (Zoho Suite) and CVE-2022-42475 (FortiOS devices), to gain unauthorized access and establish persistence on an organization's network. The Cybersecurity and Infrastructure Security Agency and co-sealers have released a joint Cybersecurity Advisory to provide network defenders with tactics, techniques, and procedures, IOCs, and methods to detect and protect against similar exploitation.
A blog post containing 7 different techniques that an attacker could use to escape from a container boundary. Each technique includes a list of required Linux capabilities for the attack, a description of the attack, an example command to launch a vulnerable container, and an example command to escape the container.
The recommended method for pinning GitHub Actions per GitHub is to pin the action to a full commit hash which causes the tarball of the action to be downloaded. However, some actions can still be exploited through supply chain attacks if they depend upon unpinned external dependencies (docker containers, other actions, etc). A total of 32% of the top started actions were deemed unpinnable. This article concludes with advice to mitigate unpinnable action attacks
A blog post from the Sonar research team detailing their findings in Proton Mail. The post includes an in-depth breakdown of the vulnerability that they discovered and the patch that was issued.
flightsim is a tool to help security teams generate malicious traffic to test security controls and network visibility. It can test for a variety of different malicious traffic patterns.
A collection of Semgrep rules that apply to HashiCorp products. This repository is a work in progress and currently only includes rules for terraform.
Chepy is a pure Python implementation of the features of Cyberchef utility. It preserves the ability to stack various actions together. While it lacks Cyberchef's magic function, it has a lot of features that could be desirable for security researchers.
A U.S. review board tasked with investigating major cybersecurity incidents said it will begin looking at the recent intrusion of U.S. government email systems provided by Microsoft, whose handling of the incident drew ire and scrutiny from federal lawmakers and the wider security community.
A blog post from the AWS Customer Incident Response Team detailing two cases that they worked on. In both of these cases, real-world examples of least privilege are given in actual customer environments.
A post that partially leverages the Crowdstrike “Nowhere to Hide” threat hunting report to analyze the current state of cloud detection and response. It notes that many modern attacks and breaches leverage credentials to pivot between systems (such as IDPs, cloud environments, and CI/CD environments). However, most tooling is siloed to a specific environment. The post argues that tooling needs to adapt to these more complex environments and provides advice for teams.
The University of Michigan was without internet for a large part of last week. CTO of SensCy Dave Kelly said that proactively taking down systems pointed to a security breach. Some sources said that the university found malware in its WiFi network.
Vitalik Buterin, Ethereum’s co-founder, allegedly had his X account compromised. According to prominent blockchain investigator ZachXBT, the incident has led to victims collectively losing over $691,000 after clicking on a malicious link.
The International Criminal Court's lead prosecutor, Karim Khan, has announced that the Hague will investigate and prosecute cybercrimes that potentially violate the Rome Statute, including war crimes, crimes against humanity, and genocide. The ICC will collect and review evidence of hacking that impacts critical infrastructure such as medical facilities or control systems for power generation.
Kantar surveyed 900 marketers and 16,000 consumers from around the world to quantify how trends and changes in the media landscape shaped their attitudes. Amazon took the title of consumers’ most preferred ad platform. Meanwhile, TV, the traditional lynchpin of ad campaigns, was absent from the ranking of marketers’ preferred ad channels. Only 6% of marketers said they will increase TV spend in 2024.