Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Google Workspace has announced 11 new defensive controls to protect against social engineering attacks. Multi-party approval will require sensitive enterprise actions to be approved by a separate admin than the one that initiated the change. Other features include DLP, AI, and logging support.
The Infection Monkey is an open source security tool for testing a data center's resiliency to perimeter breaches and internal server infection. It uses various methods to self propagate across a data center and reports success to a centralized Monkey Island server.
IAMbic is designed to be a version control system for IAM systems. IAMbic monitors IAM sources for any changes and makes a commit to a git repository containing the details of the change. At present, AWS, Azure AD, Google Workspace, and Okta are supported.
Bots can solve captchas nearly instantly and with high accuracy. In a recent study, humans solved captchas with a 50-84% accuracy, taking between 9-15 seconds, while bots had an accuracy rate of 85-100% and solved captchas in less than a second.
US prosecutors have charged two of the developers of the crypto mixer, Tornado Cash, with money laundering. The prosecutors allege that Roman Semenov and Roman Storm facilitated the anonymization of hacked funds on the platform while knowing that the funds were stolen.
The FBI has warned that the patches Barracuda recently released for an Email Security Gateway (ESG) vulnerability were not effective and that the flaw is still being targeted in the wild. It is advising organizations to remove all affected ESG appliances immediately and scan their networks for abnormal activity.
This blog post describes an instance where 40% of their users directly copied an example domain from their documentation when setting up custom DNS zones as well as other places where examples were given in documentation. This can lead to more easily identifiable canaries. The post concludes with lessons learned about the dangers of defaults and examples.
The FBI published 6 cryptocurrency wallets linked to North Korean hackers, holding ~$40M+ in likely stolen funds. The cryptocurrency was stolen by the Democratic People’s Republic of Korea's TraderTraitor-affiliated actors (also known as the Lazarus Group and APT38).
Microsoft has discovered a Chinese government-backed APT actor called Flax Typhoon that targets Taiwanese organizations with minimal malware use and stealthily persists by exploiting legitimate software tools. Flax Typhoon uses known vulnerabilities in public-facing servers and legitimate tools built into the Windows operating system to quietly remain in these networks, making it challenging to detect and mitigate the attack.
Nvidia's revenue grew 88% in Q2 2023. Its operating costs have only increased by 15% in the last year.
An open source AI copilot for your SaaS product.
It’s hard to know if you’re doing a good job as a manager. The feedback loops are either long or unclear. Being a good manager requires a completely different set of skills to what you’ve likely built before. This takes time, and you’ll need to get comfortable with making a lot of mistakes along the way.
Forbes has released its eighth annual Cloud 100 list, ranking the world's top private cloud computing companies. This year's list reflects the impact of market contraction on the industry, with AI companies like OpenAI rising in prominence and traditional cloud leaders facing challenges.
Automating the testing and deployment of your apps is mandatory to avoid wasting time or making mistakes. This article will show you how to go about achieving this goal.
Patterns can be combined to solve your app’s exact requirements, often leading to more performant and maintainable code. This article teaches new patterns for reactivity to add to your toolbox, no matter what frameworks and libraries you use.
Designing distributed systems is hard. Without careful planning, numerous issues can arise quickly. This article uses excerpts from "Understanding Distributed Systems", a book written by a Principal Engineer at Microsoft and Amazon, to provide an overview of 8 common causes of distributed systems failure and how to address them. Some common failures include physical machine breakdowns, flawed error handling, unexpected configuration changes, and critical single points of failure. Strategies like rigorous error-handling mechanisms, configuration testing, and identifying potential system vulnerabilities can be used to combat these issues. Building awareness of these pitfalls is essential for enhancing system resilience.
This article emphasizes the value of progress reports in maintaining transparency and trust with stakeholders. These reports should provide weekly updates on a project's status and highlight completed tasks, challenges faced, and upcoming actions. Using templates can streamline the process and ensure consistency. Feedback, both positive and negative, helps refine the reporting approach and address concerns.
Successful engineering organizations have multiple moving parts. Having a proper tooling stack for engineers along with an adequate set of measurable metrics can supercharge an organization’s success. It allows a company to increase the productivity, satisfaction, and shipping frequency of its engineering team.
GPT Pilot can create entire apps with human supervision. It works as a personal engineer. Developers can work together with GPT Pilot to create fully working apps.
PythonMonkey is a Mozilla SpiderMonkey JavaScript engine embedded into the Python VM. It uses the Python engine to provide a JS host environment.
Mature companies like Spotify often have a process for experimenting with new features. Spotify has honed a three-pronged strategy to creating conclusive experiments: First, they start with the exact decisions they're aiming to inform. Next, they zoom in on specific markets. Lastly, instead of diving headfirst into a full-blown feature, they test the waters by breaking the feature down into bite-sized pieces. It's a blend of precision, localization, and smart testing that keeps Spotify’s innovation playlist on repeat.
Getting a top score in Lighthouse can seem almost impossible. If you’ve tried to get a high score, it may have left you doubting yourself, the tool, or both! This article breaks down exactly what’s happening so you can understand Lighthouse better.
Practical solutions for fixing the most common CSS mistakes.
Speculation rules allow you to prefetch and prerender for next page navigation, allowing quick or even instant page loads and improving core web vitals. However, debugging them can be tricky as they’re rendered in a separate renderer. This guide explains how to use speculation rules to prefetch, prerender, and preload pages and provides various DevTools and examples for debugging.
Sponsored
There’s no question that compliance is critical. But for dev teams, it can be a drag. If you’re a developer, you were hired to build products — not tinker with screenshots and spreadsheets for compliance audits.
Google has fallen behind in the AR/VR space despite dabbling in it for over a decade. The company is working with Samsung and Qualcomm to create a competitor to Apple's Vision Pro headset. It is planning to launch the headset around summer 2024. Inside reports from Google employees say that the company's AR/VR plans are a bureaucratic mess.
A new report claims that TikTok is planning to ban links to outside e-commerce sites. The move will force people to use TikTok Shop if they want to purchase an item they see on the app. TikTok Shop is on track to lose more than $500 million in the US this year. It is unknown when TikTok plans to introduce the ban.
Scientists have created a full genetic map of the male sex chromosome. The breakthrough could help researchers decode conditions ranging from infertility to cancer. The Y chromosome comprises nearly 60 million base pairs. The researchers aim to make the data widely accessible to expand genetic studies of human disease and provide new insights into basic biology. A link to the original research paper is available.
Decades of research are starting to pay off for the field of humanoid robotics. Many startups have come out of the woodwork since Tesla announced plans to build a robot in April 2022. This article looks at Apptronik's Apollo humanoid robot, which can perform a variety of tasks including walking, unloading trailers, palletizing, and case picking. Apptronik has already managed to sign a handful of pilot tests for Apollo. Pictures and GIFs of the robot are available in the article.
React Stately is a library of React Hooks that provides cross-platform state management for design systems. It is design-agnostic and provides state management intrinsic to the functionality of the component. React Stately handles state management for common components through an easy-to-use interface. It is designed to help developers build adaptive, accessible, and robust user experiences.
Roboflow Inference is a tool for running inference on state-of-the-art computer vision models. It can be deployed on a range of devices and environments with no prior knowledge of machine learning. Roboflow Inference supports object detection, classification, instance segmentation models, and foundation models. A video of Roboflow Inference running on a video of a football game is available.