Search the archive

CLANKER FOUNDER REJECTS RAINBOW ACQUISITION OFFER

Jack Dishman, founder of Base-based token launchpad Clanker, rejected Rainbow Wallet's offer to acquire the platform in exchange for 4% of its upcoming RNBW token supply.

RALPH LAUREN ACCEPTS CRYPTO PAYMENTS

Clothing retailer Ralph Lauren now accepts crypto payments via BitPay, primarily in its Miami flagship store.

SEC PLANS TO INTRODUCE INNOVATION EXEMPTION FOR CRYPTO FIRMS BY EOY

The SEC will create an ‘innovation exemption' for crypto firms by the end of 2025 to encourage growth and continue to move away from the regulation-by-enforcement approach of the previous administration.

21SHARES LAUNCHES DOGECOIN ETF

21Shares has launched its Dogecoin ETF (TDOG) on the Depository Trust & Clearing Corporation.

MICROSOFT PAINT IS GETTING ITS OWN PHOTOSHOP-LIKE PROJECT FILES

Microsoft introduced project files to Paint that function like Photoshop Documents, allowing users to save work with layers intact and resume editing later. The update also adds opacity sliders for pencil and brush tools to control transparency levels. Windows 11's Snipping Tool has gained markup features, while Notepad has received free AI writing assistance for Copilot Plus PC users.

INDIA LEADS THE WAY ON GOOGLE'S NANO BANANA WITH A LOCAL CREATIVE TWIST

Google's Nano Banana image-generation model has made India its leading market, propelling the Gemini app to the top of the charts with 15.2 million downloads this year. Indian users are creating unique local trends, such as retro Bollywood portraits, AI-generated saree images, and vintage cityscapes, which are spreading globally. Despite leading in usage, India contributes only 1.5% of Gemini's $6.4 million in revenue, although it shows the fastest month-over-month spending growth at 18%.

TIRED OF COOKIE CONSENT POP-UPS? YOU SOON MAY SEE LESS OF THEM

The EU is reviewing its 2009 e-Privacy Directive, which created the widespread cookie consent pop-ups, and may relax the rules to reduce user frustration. Possible changes include adding more exceptions or letting users set consent in their browser. Privacy advocates warn this could weaken protections and expand data use for advertising.

RESEARCH IS A LEADERSHIP SKILL; DON'T CEDE IT TO AI

Research serves as a critical leadership tool for creating stakeholder alignment and shared understanding, not just data collection. AI tools undermine this process by eliminating human participation in knowledge creation, preventing the development of ownership and commitment that drives organizational action. Effective UX research requires building stakeholder mental models through collaborative engagement, a process that AI cannot replicate, despite promises of increased efficiency.

ONBOARDING AND CONNECTING SMART DEVICES: FIVE GUIDELINES FOR USER-FRIENDLY SMART-DEVICE APPS

Smart-device apps require clear, visual step-by-step onboarding flows to prevent users from abandoning devices during setup. Reconnection should mirror the initial setup with automatic detection and detailed guidance, as users rarely recall the exact steps. Apps must also support flexible device management, provide honest progress indicators, and handle errors transparently with specific messaging and actionable solutions.

HOW TO SPOT SIGNS OF UX MATURITY REGRESSION

The UX-maturity model outlines how organizations progress in UX across strategy, culture, process, and outcomes. Maturity can regress if practices stagnate, leadership changes, or UX becomes siloed. Teams can prevent drift by watching for early signals, keeping lightweight check-ins, broadening ownership beyond UX, and integrating maturity into ongoing business processes to maintain momentum.

AI RENDERING FOR ARCHITECTS

Upload your photo, describe your style, and reimagine any home interior, exterior, or garden using AI.

AI VIDEO CANVAS FOR FILMMAKERS

Crevas unites Veo3, Kling, and ChatGPT in one canvas, allowing you to create faster, refine with AI Chat, and collaborate in real-time.

PRESENTATION-READY PDFS WITHOUT THE BUSYWORK

ReadyBase lets users create production-ready documents in minutes through an AI-native, chat-to-PDF interface that prioritizes speed and value delivery.

STOP SAYING YOU'RE AI-NATIVE: START SHOWING IT

Being AI-native requires hands-on experimentation with AI tools rather than just designing AI interfaces. True AI-native professionals build personal tools, push AI systems to their limits, and develop strong opinions through constant use of various models and platforms. Hire designers who demonstrate genuine AI fluency through personal projects, documented failures, and in-depth toolchain knowledge, rather than theoretical experience.

THE PSYCHOLOGY OF TRUST IN AI: A GUIDE TO MEASURING AND DESIGNING FOR USER CONFIDENCE

Trust in AI systems can be measured and designed for, identifying four key components: ability, benevolence, integrity, and predictability. Calibrated trust—not blind trust or distrust—is the ideal user state, requiring transparent design that acknowledges AI limitations and potential errors. UX professionals must advocate for genuinely trustworthy systems while avoiding "trustwashing," which manipulates users into false confidence, particularly by addressing user fears about job displacement through ethical research and design practices.

ILLUSTRATED THINKING: WHY BRANDS ARE TURNING BACK TO DRAWING

Illustration has declined in advertising due to risk-averse clients, slower production, and misconceptions of it being “childlike,” but it remains powerful for distinctiveness, flexibility, and impact, especially in murals, toolkits, and digital activations. Experts see a resurgence ahead, with opportunities in motion, hybrid projects, and illustrators acting as creative partners, making illustrated campaigns stand out in a photo-saturated landscape.

IS TESLA FINALLY GETTING A 'HANDLE' ON ITS DESIGN FAILS?

Tesla is finally addressing its controversial door handle design.

FROM FONTS TO FREEDOM: REDEFINING LIFESTYLE THROUGH REMOTE DESIGN WORK

Remote design work enables designers to transform traditional employment into a location-independent lifestyle.

HEX BUILDS A SOUND WAVE TYPOGRAPHY SYSTEM FOR MAPLE'S VOICE AI RESEARCH

HEX created Maple's research division identity by exploring voice as rhythm and frequency.

Join live: _How Snowflake built its Monetization Operating Model_

STARTUP SALARIES, EQUITY, AND THEIR IMPACT ON EMPLOYEE RETENTION

Startup pay shifted again this year. Salaries are up about 5%, with product and engineering around $189k, while equity grants are roughly 26% below pre-2022, and only 32% of vested in-the-money options got exercised. Early hires still get about 1.5% and employee five near 0.3%. Turnover fell 31% yet churn stays high. Retention improves when pay is competitive, refreshes hit year three to four, and bands are transparent.

VCBENCH: BENCHMARKING LLMS IN VENTURE CAPITAL

Startup investing has long been guesswork, with even top VCs picking winners less than 6% of the time. VCBench is trying to change that: a dataset of 9,000 anonymized founder profiles built to test whether models can predict success better than humans. After scrubbing names, dates, and company info to prevent leakage, researchers ran nine LLMs. GPT-4o delivered 3.2× baseline precision, edging past tier-1 firms.

GREPTILE SERIES A AND GREPTILE V3

Greptile raised $25M Series A led by Benchmark Capital to advance its AI code review agent, Greptile v3, which addresses scale issues in code validation. The revamped agent detects 3x more critical bugs than its predecessor and has reviewed over 500M lines of code for top firms, preventing 180,000+ bugs. Greptile integrates with tools like Jira and Notion for context-aware feedback and learns team practices from PR comments to enhance code reviews.

HOW TO BUILD MENTAL STRENGTH

Mental strength goes hand in hand with clear thinking. It's what lets you override your defaults instead of running on autopilot. You build it through four trainable muscles: accountability, knowledge, control, and confidence. Add high standards, rituals, and the right role models, and those muscles compound into habits.

WHY CUSTOMER SUPPORT SHOULDN'T HANDLE YOUR PRODUCT FEEDBACK

Customer support teams lack the skills and tools necessary to gather actionable product feedback, often resulting in valuable insights getting lost. Aligning customer support's incentives with quick ticket resolution rather than in-depth feedback analysis contributes to this issue. Companies should implement dedicated feedback systems to ensure customers feel heard and product teams receive quality insights, ultimately leading to improved product development and customer satisfaction.

HOW TO LAUNCH YOUR STARTUP OUT OF STEALTH, FROM FIGMA'S FIRST MARKETER

Successful startup launches require strategic preparation, emphasizing feature readiness and clear positioning. Set a specific launch date to avoid perpetual delays and create artifacts like a website, announcement post, and social post to sharpen messaging and decisions. Focus on existing distribution channels, utilize personal networks for amplification, and view the launch as a starting point for growth rather than a final goal.

FIRECRAWL

Firecrawl is an open-source tool that converts entire websites into clean, LLM-ready markdown or structured data with a single API call for developers.

SKILLSYNC

Skillsync uncovers hidden expertise and successful patterns in your codebase to help teams scale what works.

REACHLLM

ReachLLM audits AI search results for your brand and rivals, uncovering high-intent prompts and brand mentions so you can win the AI answer box.

NARRATIVE CYCLE ENTRY

Every technology story has a rhythm. First comes obscurity, when only a few people care, and founders have to explain everything from scratch. Then comes conviction, as believers pile in and copycats multiply. Next is euphoria, when hype peaks and differentiation gets hardest. Finally comes the crash, when the same idea is written off until a few survivors prove it real again. Knowing where you enter shapes whether you're explaining an unproven idea, competing in a crowded field, or trying to rebuild belief after the hype has collapsed.

TOWARD COMPUTATIONAL TASTE: LLMS, AESTHETICS & JUDGMENT

LLMs are being used to model and optimize taste in diverse fields through personalized systems like Taste Engines, Aesthetic LLMs, and Taste Tribes. Methods like LoRe and models like TAPO enable LLMs to adapt to individual aesthetic preferences, potentially revolutionizing recommendation engines and social networks. This shift towards computational taste signifies a new era where machines not only reflect but also shape human preferences, offering both cultural and economic opportunities.

THE ONE-PERSON, BILLION-DOLLAR POWER DEVELOPMENT COMPANY

Power development has always been a slog: years of permits, consultants, site visits, and spreadsheets that eat entire teams. That's about to change. With new data systems, permitting software, robotics, and orchestration tools, one person could realistically manage hundreds of megawatts of projects and generate $100M in fees. This piece explores how an industry known for red tape might collapse into a one-person business model.

THE GOOGLE EFFECT

Our brains don't bother storing facts we know we can Google later, which means your buyers won't remember your product details either.

THE SMART AND LEVERAGED ARE GETTING RICHER

Naval breaks down why wealth is concentrating faster than ever: leverage.

STRIPE IN TALKS TO BUY BACK STOCK FROM INVESTORS

Schedule a demo to learn more

SHADOWLEAK EXPLOIT EXPOSED GMAIL DATA THROUGH CHATGPT AGENT

ShadowLeak is a zero-click vulnerability in OpenAI's ChatGPT Deep Research agent that utilized invisible, indirect prompt injection commands hidden in emails to exfiltrate Gmail data without user knowledge. The attack operated entirely on OpenAI's servers using the agent's browser.open() function call to send stolen data encoded in Base64 to attacker-controlled URLs, achieving a 100% success rate. OpenAI fixed the vulnerability in August after receiving a responsible disclosure, but researchers warn that the technique could also be used on other connected services, such as Google Drive, Microsoft Teams, and GitHub.

LASTPASS: FAKE PASSWORD MANAGERS INFECT MAC USERS WITH MALWARE

There is a malware campaign that uses GitHub repositories to deliver fraudulent password managers. The fake software delivers the Atomic (AMOS) InfoStealer to infected macOS devices. LastPass says that aside from its product, over 100 different softwares are being used, such as 1Password and Notion.

PATCH BYPASSED FOR SUPERMICRO VULNERABILITY ALLOWING BMC HACK

Binarly researchers found they could bypass Supermicro's patch for CVE-2024-10237, a firmware flaw allowing malicious updates, prompting a new CVE (CVE-2025-7937) and fix. They also discovered CVE-2025-6198, a flaw that bypasses the Root of Trust. Both enable attackers to control the BMC and OS. These flaws show firmware validation's fragility, risking persistent BMC code execution with major enterprise security implications.

A TAG TO RULE THEM ALL: USING AWS TAGS TO ENUMERATE CLOUD RESOURCES

AWS tags offer a way to attach metadata to a resource, either automatically (like the Name tag) or manually. Several services provide API calls such as ListTags or GetTags, enabling efficient enumeration of resources accessible by an identity. TagNabIt is a tool designed for tag-based brute-force enumeration.

EXPLORING GRAPHENEOS SECURE ALLOCATOR: HARDENED MALLOC

GrapheneOS features a hardened malloc, a memory allocator that uses ARM Memory Tagging Extension (MTE) to assign tags to memory regions and detect corruption, effectively preventing heap overflows and use-after-free attacks. Its two-stage quarantine system, which involves randomized and FIFO queues, makes exploiting freed memory difficult by requiring attackers to perform thousands of free operations. Large allocations are secured through guard pages, address space randomization, and the separation of metadata from user data, all of which enhance security.

EXTERNAL ATTACK SURFACE MANAGEMENT (EASM) BUYER'S GUIDE

External Attack Surface Management (EASM) tools automate the discovery and continuous monitoring of internet-facing assets, providing organizations with an attacker's perspective of their vulnerabilities across domains, IP addresses, and exposed services. The strategic value lies in combining automated asset discovery with risk prioritization—EASM products excel at identifying shadow IT, abandoned subdomains, and misconfigurations that traditional internal scanning misses. Organizations should select EASM solutions based on their specific needs: small businesses require clear remediation guidance, SMEs need robust subdomain discovery to prevent takeovers, and enterprises benefit from large-scale IP scanning with export capabilities for distributed security teams.

policy. Be among the first to join the early access waitlist!

MSIXBUILDER

MSIXBuilder is a PowerShell tool for creating MSIX packages with embedded test applications.

LLM4DECOMPILE

LLM4Decompile is an open-source LLM dedicated to decompilation.

FIREZONE

Firezone is an open source platform for secure remote access, suitable for organizations of any size. Unlike most VPNs, it uses a granular, least-privileged approach with group-based policies to control access to applications, subnets, and more.

AMERICAN ARCHIVE OF PUBLIC BROADCASTING FIXES BUG EXPOSING RESTRICTED MEDIA

A vulnerability in the American Archive of Public Broadcasting website, which has been exploited since at least 2021, allowed unauthorized downloading of protected and private media through an insecure direct object reference (IDOR) flaw that bypassed access controls by manipulating media ID parameters. The exploit circulated in Discord preservation communities and "data hoarder" groups, leading to leaks of protected content, including a banned Sesame Street episode featuring the Wicked Witch of the West. AAPB fixed the vulnerability within 48 hours after being notified. The extent of accessed content during the years-long exploitation remains unknown.