Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Uber's data science team turned off Meta ads for three months in North America in 2018 without any impact on user acquisition, suggesting that Uber had already reached its total addressable market in the region, leading to an annual savings of $25 million in advertising spend.
Sponsored
Most developer tools let you try before you buy. But in application security, too many vendors force you through endless demo calls and artificial POCs just to see the tool.
Another Cisco critical vulnerability has been disclosed. CVE-2024-20419 allows unauthenticated attackers to change any user's password, including administrators'. This flaw in the password-change process enables access to the web UI or API with compromised user privileges. No workarounds exist. Cisco released a security update and reports no active exploitation.
MNGI Digestive Health is notifying over 765,000 individuals about a data breach from August 2023. The breach, discovered nearly a year later, potentially exposed sensitive personal and health information, including names, Social Security numbers, medical data, and financial details. MNGI is currently working to inform affected individuals through written notifications.
CrowdStrike has shared technical details on the Falcon Update that caused a global outage on July 19. The issue impacted customers using the Falcon sensor for Windows version 7.11 and above between specific times on July 19. CrowdStrike has fixed the error in Channel File 291 and is conducting a root cause analysis to prevent similar incidents in the future.
The AquaSec team scanned over 50k repositories belonging to the top 100 organizations on GitHub for secrets using conventional (git clone) and unconventional methods. Using git clone --mirror fetches a more complete git history that includes PRs and other dangling refs. It led to finding additional secrets on 18% of scanned repositories. The Aqua team also tested a novel approach to scanning cached views from SCMs and found that some additional secrets could be found, though the process is difficult and has a lower chance of success.
The gitRepo volume driver is a deprecated k8s storage driver that allows for reading files into a pod from a remote git repository. This post examines a vulnerability in the gitRepo driver whereby a maliciously crafted git repository could sneak git hooks into a node and execute commands as root. The authors submitted a PR to fix this issue which will be released in version 1.31.
This blog post discusses why the ViewState vulnerability is not used for exploits despite being around for a long time and explains how it can be done on a fully patched Microsoft Exchange 2019 host. It explains how to exploit view state vulnerabilities and the process of resetting compromised machine keys in IIS. It also highlights the risks associated with resetting machine keys and provides steps to regenerate them based on whether they were automatically generated or static.
Command Zero's platform for investigation combines autonomous and user-led methods in a federated data model and leverages automation and advanced Language Learning Models to augment human investigations.
Network inspection library for Node that allows packet crafting and parsing as well as capturing network traffic and sending packets in all formats.
Fragtunnel is a PoC tool for tunneling TCP traffic through IDS/IPS engines and Next Generation Firewalls. It exploits the fact that they allow a limited number of packets before making a decision on whether to allow or deny the traffic.
Operation Jackal III, a global law enforcement effort targeting West African crime groups, resulted in 300 arrests and $3 million in asset seizures. There are 400 additional suspects across 21 countries.
The Shared Responsibility Model is used by cloud providers to describe a split in security responsibilities where cloud providers are responsible for the underlying services and users are responsible for securing their workloads built on those services. Customer breaches could result in negative reputational damage to cloud providers. This forces cloud providers to improve their defaults to be more secure.
This article compares RDP security using TLS-only versus NLA. NLA-secured servers faced significantly more login attempts but also provided more insights into attacker tactics. Geographical origins of attacks differed between NLA and TLS, with certain countries showing preferences for one protocol over the other. While NLA is considered more secure, it may attract more sophisticated attacks. Researchers found NLA honeypots to be more valuable for understanding cybersecurity threats and the human element behind them.
Microsoft says that “less than one percent of all Windows machines” were affected, but it was enough to create problems for retailers, banks, airlines, and many other industries.
Report on the state of education for secure software development that highlights gaps in education, time constraints in training, and AI security as a critical future area for education.
A judge dismissed major SEC charges against SolarWinds and its CISO Timothy Brown regarding cybersecurity practices after a supply chain attack.
Sponsored
If you're looking to get in front of marketers, software developers, executives and other tech professionals, consider advertising in TLDR. We have 10 newsletters to choose from and a subscriber base of 4+ million tech professionals to effectively reach your target audience. Learn more [4] about running your first campaign with us.
91% of online consumers in the UK feel overwhelmed by social media ads and 35% have blocked or unfollowed brands due to them. 79% of online shoppers who begin their product searches on retailers' websites or apps typically browse by category, while 65% begin their search using the search bar or filters. Brands should assess their social media campaigns to avoid negative reactions and continuously improve website categorization and search features.
Meta and the Center for Open Science launched a pilot program to give researchers unprecedented access to Instagram user data. It aims to explore the impact of social media on teen well-being. The program will study Instagram's effects on teen social and emotional health across various contexts and regions. Meta will provide a User Guide with data details in August.
88% of carts are abandoned before purchase. To address this, offer limited-time discounts and send triggered text messages to remind customers of their incomplete purchases. Use progress bars on checkout pages to guide users and reduce drop-offs. Automated email reminders and transparent cost disclosures help recover lost sales. Building trust through social proof and offering a money-back guarantee also encourage purchase completion.
To grow Wiz's LinkedIn followers from 30K to 200K, Tom Orbach's team created compelling content with a single clear message per post, engaging visuals, and interactive contests. They emphasized daily engagement and used employee advocacy to extend their reach. This approach, coupled with consistent posting, turned regular updates into viral sensations.
Promote SEO content through ads to maximize value. Use PPC to build links to important SEO content or retarget users to advance them in the buyer's journey. Dominate critical keywords by ranking for them in search while running ads simultaneously. Use PPC for quick results, and use SEO when paid keywords are too expensive.
Wordtune is an AI-powered writing companion that helps rephrase and improve your writing. It can rewrite existing content, create content from scratch based on templates, and summarize videos or text. Wordtune can be used in other tools, such as Slack or Outlook.
55% of holiday shoppers reported Meta helped influence their seasonal purchases. Meta's 19-page holiday marketing playbook focuses on Reels ads and advanced AI tools to optimize creation and targeting. The guide covers how to allocate ad budgets, tips on meeting holiday sales demand, and key dates for planning.
56% of businesses use remarketing for customer acquisition. 79% of consumers prefer offers related to their previous interactions. Remarketing ads outperform regular ads significantly, with retargeting campaigns achieving 10X better results than display/banner ads. Facebook remarketing ads garner 3X more engagement than regular Facebook ads.
A North Star Metric (NSM) is a metric companies use as a focus for their growth. For example, Spotify identified "time spent listening" as its NSM, instead of common metrics like subscriber count or revenue per user. A good NSM measures customer value, encourages engagement, and predicts retention and growth. NSMs should be based on fundamental aspects of the business that are unlikely to change soon.
Netflix's growth model is evolving with the rise of ad-supported memberships, which grew 34% quarter-over-quarter and now account for 45% of sign-ups in available markets. Despite this rapid growth, Netflix's current ad inventory can't keep pace, so significant ad revenue isn't expected until after 2025. To address this, Netflix is developing an in-house ad tech platform set to launch globally in 2025.
The send-from email address doesn't affect deliverability, but using a personalized send-from name, like “name@domain”, can improve open rates and engagement.
Types of content brands should have include a founding story, a social show, collaborations with influencers, athletes, or customers, and BTS content.
A transcript of a podcast with Rory Sutherland, the Vice Chairman of Ogilvy UK, about marketing lessons from his career and creating space for unorthodox ideas.
Sponsored
Does shipping digital experiences quickly mean compromising on quality? Not necessarily. AI and visual development create new ways to build, iterate upon, and optimize applications and websites.
On July 19, CrowdStrike released a sensor configuration update to Windows systems that triggered a logic error resulting in system crashes and blue screens. The issue was caused by an updated Channel File 291 (a config file) that controls how Falcon evaluates named pipe execution. CrowdStrike has corrected the error and updated the file, but billions of systems are still affected.
Box shadows in CSS can be used to create a variety of effects beyond simple drop shadows, such as layered shadows, rounded corners, and 3D-like effects. They can be combined and animated to create complex visuals, such as bouncing balls and simulated 3D objects. This article goes over how to and how not to use box shadows. Using box shadows for such advanced effects can be performance-intensive, especially when blurring or transparency is involved.
Node's spawn function can be slow due to its blocking nature. Using the Node cluster module or worker threads can improve spawn performance, but may have drawbacks like isolated processes or added overhead. Moving spawn calls to child processes and using abstract sockets or process.send for communication can help performance in this case.
Overplanning in software projects can lead to overcomplication, overengineering, and wasted time. Prototyping is better because it helps identify unknown challenges and bottlenecks. It's better to build a minimum viable product (MVP) and iterate based on real-world feedback than to strive for perfection on paper.
This author disagrees with blaming software engineers for the CrowdStrike outage, instead placing responsibility on CEOs, customers, government regulations, middle management, and the board of directors. These parties prioritized profits over quality and failed to give the software engineers the respect and resources they needed to do their jobs properly.
Reddit users share their positive experiences transitioning from tech lead back to senior engineer roles. The transition improved work-life balance and a renewed focus on technical skills for many.
Sponsored
Over 2/3rd of dev teams test less than 50% of their workflows, causing bugs to sneak out. QA Wolf [11] gets your organization to 80% automated E2E test coverage in less than 4 months.
rr is a C/C++ debugging tool for Linux that records program executions and allows for deterministic replay, replacing gdb. It also enhances gdb with efficient reverse-execution for easier debugging.
Nextra is a simple, powerful, and flexible site generation framework. It uses Next.js and Markdown.
Fakemail is a fake SMTP server for software integration testing.
A recent study by the Data Provenance Initiative found a significant decrease in the availability of web data for training AI models. This is due to many websites restricting data usage through methods like the Robots Exclusion Protocol or changing their terms of service. This data scarcity will be tough for AI companies who rely on large datasets to train and improve their models.
Running untrusted JavaScript code within an application can open up a world of customization but also exposes the platform to security risks. There are various methods to mitigate these risks, including time-boxing execution with Web Workers, disallowing global objects, and using isolated virtual machines. Developers can also opt for server-side options like Docker or WebAssembly.
Leading foundries Intel, Samsung, and TSMC are differentiating themselves with unique approaches to 3D chip design and packaging. Intel focuses on developing "sockets" for chiplets, Samsung is creating mini-consortia of chiplet providers, and TSMC offers a variety of packaging options and a new design language called 3Dblox. These foundries are also working on new technologies like custom HBM, backside power delivery, and glass substrates to address challenges in performance, power delivery, and signal integrity.
Bloomberg terminals have not been disrupted due to their extensive high-quality datasets, a user experience loved by users, strong network effects, and role as the infrastructure of global finance.
There are a large number of fake reviews on the Mac App Store for cheap top paid apps, all of which were posted around the same time period, that may have been purchased by a single developer to camouflage their own app's fake reviews.