Search the archive

WINDOWS API FUNCTION CHEATSHEETS

A comprehensive reference of Windows API functions divided by use case.

SENTRYPEER

SentryPeer is a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and the number they tried to call.

TRACEESHARK

Traceeshark allows users to do Linux runtime security monitoring and advanced system tracing using Wireshark. It also has the ability to capture events using Tracee directly from Wireshark and have them stream in like a network capture. This can be done either locally on a Linux machine running Wireshark, semi-locally using Docker Desktop's VM on Windows and Mac, or even remotely over SSH.

CHANGES TO THE OSCP

Offsec has announced changes to the exam format of the OSCP exam including the elimination of bonus points and an assumed breach model for the Active Directory portion. It has also introduced the OSCP+ designation, which will require recipients to renew their certification via CPEs, retake the exam, or earn a higher level cert every 3 years to maintain the + distinction. The community is split on reactions to the announcement, with some feeling that the OSCP+ is a cash grab and that the AD changes are too easy, while others are celebrating that the certification will now fulfill DoD requirements.

EX-ENGINEER CHARGED IN MISSOURI FOR FAILED $750,000 BITCOIN EXTORTION ATTEMPT

A 57-year-old former core infrastructure engineer from Missouri was arrested for attempting to extort his ex-employer. He allegedly sent emails threatening network lockouts, data deletion, and server shutdowns unless paid 20 bitcoin ($750,000). He faces charges of extortion, computer damage, and wire fraud.

MICROSOFT COPILOT: FROM PROMPT INJECTION TO EXFILTRATION OF PERSONAL INFORMATION

This blog post discusses a vulnerability in Microsoft 365 Copilot that allowed personal information theft through prompt injection. The exploit chain involves techniques like prompt injection, automatic tool invocation, and ASCII smuggling to exfiltrate data without user consent. The author responsibly disclosed the exploit to Microsoft, leading to fixes implemented to prevent further exploitation.

2025 BUDGET PLANNING GUIDE FOR SECURITY AND RISK LEADERS

Forrester advises CISOs to prioritize 2025 budgets on key areas including software supply chain, API security, and IoT/OT threat detection.

FBI WARNS CRYPTO FIRMS OF AGGRESSIVE SOCIAL ENGINEERING ATTACKS

The FBI warns that North Korean hackers are targeting cryptocurrency companies using sophisticated social engineering tactics to steal crypto assets.

SEXTORTION SCAMS NOW INCLUDE PHOTOS OF YOUR HOME

META SHARES REELS MARKETING TIPS IN NEW GUIDE

Reels are Meta's most rapidly growing content type, driving more than 200 billion views per day on Facebook and Instagram. Meta's latest "Reels Performance Playbook" breaks down essential tactics for brands to capitalize on this trend. Covering everything from creative formats to storytelling, the concise guide offers actionable insights for integrating Reels into your marketing strategy.

BLUESKY CONTINUES TO SOAR, ADDING 2M MORE NEW USERS IN A MATTER OF DAYS

Bluesky added over 2 million new users in just four days following X's shutdown in Brazil. The surge in users led to Bluesky becoming the top app in Brazil, outpacing Instagram Threads. The platform's decentralized nature and resemblance to Twitter/X are key factors driving its rapid adoption.

13 EXAMPLES OF GROWTH LOOPS TO ACCELERATE USER ACQUISITION

The AARRR funnel is now seen as inadequate due to its linear structure and the silos it creates. Growth loops offer a more holistic approach, aligning with the non-linear nature of real-world user journeys. Adopting growth loops involves focusing on the entire user journey for a more agile growth strategy. This post illustrates 13 growth loops, including worth-of-mouth, UGC sharing, and product-plug.

HOW WE GOT 50+ BACKLINKS WITH ONE SEO BLOG POST

Find 10-20 link-magnet keywords that are likely to be searched for by journalists or bloggers. Create a comprehensive, long-form article targeting one of the keywords, citing information from high-quality sources without external links. Add internal links to this page from your existing, related content. Once your article starts ranking in position 1 to 3 for the target keyword, you'll likely start earning several backlinks each month.

6 FREE UNIVERSITY COURSES THAT'LL MAKE YOU A BETTER MARKETER

A list of 6 free courses from universities like Columbia, Rutgers, and Penn. The topics covered include branding, viral marketing, and marketing analytics.

POWTOON

Powtoon allows users to create animated videos and presentations without advanced design skills. It's widely used for explainer videos, training materials, and promotional content. It offers a wide range of customizable templates, characters, and scenes.

“EDUCATION” ISN'T ENOUGH: HOW TO MARKET WHEN INFORMATION IS DIRT CHEAP

A decade or so ago, Google Search was in an era of information scarcity, where hyper-relevant information was hard to find and content was costly to create. Today, the opposite is true, which fundamentally changes how marketing functions. In this era of information abundance, brands should offer new flavors of information that serve unique needs, create completely new information that competitors haven't done, and invest in entertaining the audience rather than churning out rote information.

DAY 1,095

Minjae Ormes reflects on her 3 years at LinkedIn as VP of Marketing. She shares the unique challenges marketers face, being highly visible yet often misunderstood. She stresses the need to maintain self-awareness and a distinct point of view amid external opinions. Ormes advises marketers to approach their first impression like launching a product in a new market, actively defining their value and contributions.

SOCIAL SHARING MIGHT GET YOU SUED: SOCIAL MEDIA AND COPYRIGHT LAW

Despite engaging on social media, many companies are unaware that sharing copyrighted content without proper rights can lead to serious legal issues. Copyright law protects creators by regulating how their work is used, and failure to comply can result in significant penalties. Familiarity with copyright terms like Fair Use and Creative Commons is crucial for responsible content sharing.

HOW WE HARVESTED INSIGHTS FROM AN INCONCLUSIVE A/B TEST

Adding a product comparison widget resulted in no meaningful change to the test KPIs, but this team found a significant increase in conversion when segmenting the data further.

9 MISTAKES WHEN WORKING ON POSITIONING

Common product positioning mistakes include pre-ordaining a category strategy, overfocusing on direct competitors, and not talking to customers.

US GAMBLING SECTOR'S ‘RELENTLESS' SOCIAL MEDIA POSTS BREACHED OWN RULES, STUDY CLAIMS

Over one week, 1,012 out of 1,353 social media posts by top US gambling brands potentially breached the American Gaming Association's responsible marketing code, according to University of Bristol researchers.

Get the guide from Builder.io

THIS CRAZY SYNTAX LETS YOU GET AN ARRAY ELEMENT'S TYPE

You can extract the type of an array element in TypeScript using the "Array[number]" syntax, which can be useful for creating enums from arrays and extracting specific types from complex data structures. This technique is called an indexed access type, which lets you access a property on a type by its key. In the case of arrays, using "number" as the key retrieves the type of the array's elements.

WIKIMEDIA SLASHED 300MS OFF EVERY WASM EXECUTION WITH WASMEDGE

Wikifunctions, a Wikimedia Foundation project under development, made improvements in system performance, particularly in the speed of function calls. Its team pre-loaded WASM into a pool of ready threads, which led to faster single and saturated requests. They also implemented a variety of front-end improvements, bug fixes, and code enhancements, including a re-write of front-end styling code and a feature flag for WikiLambda code installation on other wikis.

BRAND NEW PERFORMANCE FEATURES IN CHROME DEVTOOLS

The new Performance Panel features in Chrome DevTools provide detailed insights and tools for optimizing Core Web Vitals and overall web performance. This tutorial explains how to access and configure these features. It also goes over how to interpret lab and field data, along with practical tips for fixing LCP, CLS, and INP issues using the new Performance Panel features.

SANDING UI

“Sanding” a user interface involves repeatedly clicking through the UI, testing its functionality, and identifying any issues or "splinters" that might disrupt user experience. As an example, a developer encountered a problem where a gap in a flexbox layout created a dead zone that prevented users from interacting with a radio button. By removing the gap and adding padding to the label, he eliminated the problem and smoothed out the user experience.

MY TECH PROMOTION ALGORITHM

Steve Huynh, a former Amazon Principal Engineer, shares his "Tech Promotion Algorithm," a three-step strategy for career advancement. The algorithm encourages engineers to identify their biggest gaps in skills and performance, formulate a plan by working backward from desired evidence of success, and then execute the plan while seeking regular feedback.

NEXT.JS + SUPABASE APP IN PRODUCTION: WHAT WOULD I DO DIFFERENTLY

This developer built a mid-sized Next.js application with Supabase and, as a result, he recommends using server components for data fetching, server actions for data mutations, and shared utility wrappers for authorization, validation, and authentication. In terms of database design, the developer emphasizes the importance of using surrogate keys, implementing row-level security (RLS) in a performant way, and utilizing server-side routing for mutations.

ANNOUNCING VUE 3.5

Vue 3.5 has performance enhancements, including a reactivity system refactor resulting in improved memory usage and faster reactivity tracking for large arrays. The release also includes several new features, such as reactive props destructuring for easier prop declaration, SSR improvements like lazy hydration and a stable ID generation API (useId), and enhancements to the defineCustomElement API for creating custom elements.

DATALINE

DataLine is an AI-powered data analysis and visualization tool that allows users to explore and analyze data from various sources like Postgres, Snowflake, MySQL, Excel, and more. It provides a user-friendly interface where users can ask natural language questions about their data and get instant insights in the form of charts, tables, and reports. All data is stored locally.

BOMBARDIER

bombardier is a benchmarking tool for HTTP(S) requests. It is built in Go, but it uses the highly performant fasthttp library rather than Go's standard HTTP library.

HOW NAVY CHIEFS CONSPIRED TO GET THEMSELVES ILLEGAL WARSHIP WI-FI

The senior enlisted leaders of the USS Manchester secretly installed a Starlink Wi-Fi network during a deployment for their exclusive use while rank-and-file sailors were denied internet access. The network, dubbed "STINKY", was installed without authorization and posed significant risks to the ship's security and operations. Command Senior Chief Grisel Marrero, the orchestrator of the scheme, was convicted at court-martial and reduced in rank.

MY BLOG ENGINE IS THE ERLANG BUILD TOOL

Fred Hebert's blog is powered by the Erlang build tool, Rebar3. He uses its compiler infrastructure to generate static HTML content. His blog engine uses Erlydtl, an Erlang implementation of Django Templates, for template inheritance and Rebar3's compiler for incremental rebuilds, ensuring only necessary files are recompiled.

STATE OF CSS 2024

The State of CSS 2024 survey is now open.

IS MY BLUE YOUR BLUE?

Test your color categorization as the color shown converges between blue and green.

BRIEF NOTE ON BUTTONS, ENTER, AND SPACE

Native `button` elements have different keyboard interaction behaviors across browsers and screen readers, with variations in how Enter and Space keys trigger events.

REPAINT

Repaint is a website builder for people who want to make professional websites on an open canvas.

Join over 15 million Babbel learners and start learning today →

off while their Labor Day Sale lasts!

NVIDIA TAKES AN ADDED ROLE AMID AI CRAZE: DATA-CENTER DESIGNER

Nvidia CEO Jensen Huang is trying to build Nvidia into a one-stop shop for all of the key elements in a data center. The strategy is designed to make the company's offerings stickier for customers. Nvidia is also building a business that supplies AI-optimized Ethernet, a business that is expected to generate billions of dollars in revenue within a year. The competition in the space is growing, with companies like AMD bolstering their data-center offerings and chip suppliers like Intel offering services and systems to help customers build and operate AI tools.

OPENAI SEARCHES FOR AN ANSWER TO ITS COPYRIGHT PROBLEMS

OpenAI is offering $1 million to $5 million a year deals to publishers for data that it has mostly already scraped. While these deals may give the company access to APIs for more up-to-the-moment queries, the payments are more of a way to ensure that publishers don't sue OpenAI for the stuff it has already scraped. A lawsuit would be much more expensive for OpenAI. Its current lawsuit with The New York Times may end up costing it at least $7.5 billion in statutory damages alone.

NEW HYDROGEL ‘INVENTION' COULD SLOW, TREAT ARTHRITIS IN EARLY STAGES, CLAIMS CHINA

Scientists in China have developed a hydrogel that may be able to treat osteoarthritis and slow down disease progression. The hydrogel restores cartilage lubrication, preventing the progression of early osteoarthritis. It is comprised of tiny hollow spheres made of a biomaterial derived from natural protein and a synthetic polymer, the combination of which creates a favorable environment for cell growth and hydration. The treatment is able to precisely target small areas of inflammation. The hydrogel has shown promise in rat studies, outperforming traditional treatments in terms of reducing friction and improving joint lubrication.

WHAT A 160-YEAR-OLD THEORY ABOUT COAL PREDICTS ABOUT OUR SELF-DRIVING FUTURE

Greater efficiency in deploying a resource causes demand for that resource to skyrocket, negating any expected decline in total usage. For example, people responded to improved light bulb efficiency by installing so many more of them there has been no decline in the total energy consumed by lighting. Jevons paradox, which describes this phenomenon, explains why efficiency improvements can backfire and cause the opposite outcome from what was intended. Autonomous vehicles promise increased safety and lower environmental impact, but Jevons paradox predicts that total crashes and emissions will likely increase rather than fall.

AMAZON S3 NOW SUPPORTS CONDITIONAL WRITES

Amazon S3 now supports conditional writes that can check for the existence of an object before creating it. This helps developers more easily prevent applications from overwriting any existing objects when uploading data. Conditional writes can be used to simplify how distributed applications with multiple clients concurrently update data in parallel across shared datasets. Developers no longer need to build any client-side consensus mechanisms to coordinate updates or use additional API requests to check for the presence of an object before uploading data. The feature is available at no additional charge in all AWS regions.

WHAT WE CAN LEARN FROM VINTAGE COMPUTING

Thanks to open source, no technology ever has to become obsolete as long as there is a community to support it. Working with vintage technologies is fun, helps developers learn more about computer science, and preserves computing history. There are many lessons to be learned from the 'old ways'. This article looks at several projects keeping older technologies alive and the lessons that can be learned from them.

FOR YEARS, TECH FIRMS WERE FIGHTING A WAR FOR TALENT. NOW THEY ARE WAGING WAR ON TALENT

The tech labor market in the 21st century went from cold to overheated over the span of many years - it wasn't sudden. Tech firms have now changed significantly as these companies are starting to prioritize cash flow. The operating environment has changed from one that accepts a high tolerance for failure to one with very low, if not zero, tolerance for failure. Tech must now operate within financial constraints with very little room for negotiation.