Effective designers collaborate, visualize complexity, and focus on improving services rather than debating definitions or ideal conditions. Advocacy alone risks irrelevance - showing impact through practice fosters better outcomes. Success comes from doing the work, integrating user expectations, and shaping services in real-world, imperfect environments.
2024.12.09·grillopress.github.io·2 min read·TLDR Design The Logitech MX Creative Console improves creative workflows with a customizable keypad and dial. It supports Adobe and other apps and offers precise control, smooth functionality, and a user-friendly setup. Its durable, stylish design includes up to 135 shortcuts and seamless customization via Logi Options+.
Collect design feedback, track bugs, manage projects, and run usability tests, all while keeping your team in sync.
Automate 80% of repeat writing, thinking, and creative tasks.
Jaguar has unveiled a sleek new logo featuring a more abstract "leaper" cat, aligning with a broader trend of car brands adopting minimalist, flat designs as they shift toward electric vehicles. This move, seen in brands like Audi, Toyota, and BMW, reflects design trends and a subtle nod to addressing past environmental concerns.
2024.12.09·links.tldrnewsletter.com·4 min read·TLDR Design Pantone selects its annual Color of the Year by analyzing visual references and trends. This year's choice, Mocha Mousse, reflects a desire for a core neutral. The warm, chocolate-inspired hue aims to spark conversation about color's emotional impact, building on past selections like 2021's yellow and grey, chosen to reflect global uncertainty.
In 2022, Ilía Tuma founded his home furniture and accessories brand, Tuma, blending timeless aesthetics with emotional design to create thoughtful, nature-inspired products. Collaborating with experts like type designer Kirill Turygin and illustrator Dasha Surma, Tuma's branding highlights its dual focus on functionality and emotional connection, bringing together furniture, textiles, and ceramics under a cohesive, creative vision.
Known for pixel-like depth, Gerardo Pontiérr creates 3D LEGO mosaics that blend portraiture and sculpture.
In 2024, creatives were challenged with AI disruptions, economic shifts, and evolving media, but were inspired by resilience, innovative design, and cultural moments.
SFT Ritam Sans is a versatile typeface inspired by Belgrade's contrasts featuring 8 weights, italics, and oblique styles for dynamic designs.
Sponsored
You worked hard to build your business from the ground up, and to secure the capital that allows it to flourish. So why do most banks chip away at it with fees, minimums, and delays? Founders deserve better.
_*Brex is a financial technology company, not a bank._
A new era of innovation is emerging as the AI industry hits the limits of traditional "bigger is better" scaling. Techniques like real-time reasoning, novel architectures beyond transformers, and embodied AI are opening fresh paths to more robust, generalizable intelligence. Meanwhile, VCs are pivoting focus from bits to atoms, seeing untapped potential in AI-driven disruption in giant industries like energy and logistics. Seed and Series A startups pioneering this shift are attracting the lion's share of funding. As the world enters 2025 with new leadership and a revitalized M&A market, expect a surge of activity from investors who spot these seismic changes.
Just like a chain is only as strong as its weakest link, a company is only as resilient as its greatest vulnerability. Identifying your "brittle points" - like dependence on a single platform, channel, client, or employee - is the first step to building redundancy and contingency plans. This is similar to engineering, where single points of failure are anticipated and mitigated through backup systems.
Aravind Srinivas, CEO of Perplexity AI, emphasized the importance of an "extreme bias for action" and hiring individuals with "chips on their shoulders" during a recent Stanford talk. He also discussed building a balanced team by recruiting complementary skills and avoiding redundancy.
Did you know that your Google Ads Quality Score can directly impact both your ad placement and costs? A low score can deter your ad performance and increase costs. On the other hand, a high ad quality score not only improves your ad visibility, but also significantly reduces your CPC, enabling you to scale your ad budget further. This blog provides an actionable approach to understanding the key factors that affect your Quality Score (from ad relevance to landing page experience), how to optimize your campaigns, improve CTR, and lower costs – all while delivering better ROI for your business.
Most B2B teams have gaps in their go-to-market approach, lacking buyer journey maps, clear metrics, and engagement tracking. Plugging these holes requires focusing on the biggest constraint, usually generating quality meetings, through targeted content, comprehensive tracking, AI-assisted research, and personalized outreach. When executed well, this leads to 3-5x higher response rates and predictable pipeline growth.
Activation metrics are the key actions that turn new users into dedicated ones, but they're different for every product. In this post, PostHog shares its process of digging into user data to uncover the behaviors that predicted long-term retention. By testing multiple event combinations, it found that users who watched 5+ session replays and set a filter were most likely to stick around. Identifying your own activation metrics requires rolling up your sleeves and diving into the data - there's no shortcut. However, for companies willing to do the work, optimizing these metrics can be the secret to sustainable growth.
Meeting agent that helps run your meetings.
Generative AI platform for personalized visual marketing and advertising.
This book, written for startup CTOs, covers leadership, management, and technical topics. It aims to provide perspective on the common problems faced by every technical leader. The book provides frameworks for leaders to help make their own well-reasoned decisions. It offers best practices and provides reference materials for a better understanding of each topic.
Disruptive technology waves often feature innovation across all tech stack layers, stimulating further advancements beyond initial innovations. They involve both startups and incumbents, affecting both hardware and software, with agents of innovation in varied sectors. Foundational potential is marked by these waves as they set the stage for future technology developments, as seen with AI building on past internet and cloud advancements.
It's important to break down barriers so that everyone can participate in startup investing. Historically, one of the main barriers keeping lay people from investing in the startup ecosystem has been terminology. From “carry” to “liquidity,” “ARR" to “ROFR,” there's no shortage of jargon in venture capital that can confuse, frustrate, and overwhelm newbies.
When building a business, it's easy to focus on the end goal and feel discouraged when you don't get there as quickly as planned.
The answer isn't in your spreadsheets - it's out in the real world.
This post proposes a hierarchy of needs for workers to refer to when picking a startup to join.
Sponsored
For security teams, the cloud is both a blessing and a curse. Abundant telemetry allows for unparalleled visibility and control, but traditional security tools (like SIEM and EDR) fall short in addressing the complexities and scale of cloud infrastructure.
The Solana web3.js SDK was backdoored by a malicious commit for roughly 5 hours on December 2. The backdoor was hidden in a new addToQueue function which sent the user's private key in seemingly benign headers to an attacker-controlled server. Calls to the function were then placed in strategic locations in the key generation and loading process. The developers urge any developers who think they might have been compromised to rotate their keys.
Atrium Health reported a data breach affecting 585,000 individuals due to online tracking technologies on its patient portal between 2015 and 2019. Potential personal information may have been shared with third parties like Google and Facebook, though no financial data was compromised.
Two versions of the Ultralytics AI library were compromised to deliver a cryptocurrency miner, leading to a spike in CPU usage for users. The malicious code injection occurred in the PyPI deployment workflow, allowing unauthorized modifications to be inserted after the code review step. Users are advised to update to the latest version of the library to avoid potential security risks.
Paved roads is a common security buzzword that refers to the process of creating a standardized path for common security pitfalls. Security reviews should look to identify common pain points across different reviews as candidates for paved roads and then work with teams that will pioneer the paved path. Following this methodology, full classes of vulnerabilities can be fixed at scale as opposed to individually as they appear in individual reviews.
This author provides a deep dive on macOS internals and their process in building a KEXT fuzzer. The post begins by detailing the difficulties of kernel-level binary instrumentation in macOS. The author then describes how they came to decide on an architecture that uses a custom-built trampoline to instrument basic blocks that were identified in the Boot Kext Collection and then feed the coverage results into the next iteration of the fuzzer.
Sponsored
Join a panel of experts from BigID and Cloudrise for an interactive webinar [11] on implementing Data Security Posture Management (DSPM) at enterprise scale. On the agenda: DSPM vs DLP, going from demo to deployment, remediating data incidents, and handling the complexities
Ethyca's platform helps organizations inventory data through automated system mapping to remain compliant with consent management across their entire data workflows.
Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments and the enforcement of privacy regulations in code.
ChainReactor is a project that leverages AI planning to find exploitation chains for privilege escalation on Unix systems.
French and Dutch police dismantled the Matrix encrypted chat app used by criminals, seizing 2.3 million messages about illegal activities across 40 servers. The operation led to three arrests and exposed the app's supposed security.
Denial of Wallet attacks occur when an attacker makes use of cloud services which charge based on usage to generate large bills for victims. They can be caused by scaling traditional DDoS attacks or other vectors such as cryptojacking or LLM hijacking. This is the first post in a series on Denial of Wallet attacks and mitigations to protect against them.
A new zero-day vulnerability in Windows lets attackers steal NTLM credentials by tricking users into viewing a malicious file in Windows Explorer. The issue affects various Windows versions, from Windows 7 to Windows 11. An unofficial patch is available from the 0patch team until Microsoft releases an official fix.
While automatic secrets rotation is a desirable goal, it requires significant organizational maturity in secrets management, proper infrastructure, and careful planning rather than being a simple one-click solution, as credential rotation involves complex processes that can impact production systems if not handled correctly.
The U.S. offered $10 million for information leading to the arrest of a Russian hacker known as "Wazawaka," who was involved in ransomware attacks.
Apple is being sued for not implementing a system to scan iCloud photos for child sexual abuse material.
ANDROID'S CVE-2020-0401 (PACKAGEMANAGERSERVICE)
This blog post dives into CVE-2020-0401 after an old OnePlus phone sparked curiosity about the vulnerability. The vulnerability allows malicious apps to register as installers without proper permissions so the author tried to exploit it.
Sponsored
✨ Brands using MutualMarkets [4] are seeing major CTR and ROAS uplifts by integrating the IP from the TV shows their audiences already love, directly into their advertising — e.g., featuring Emily in Paris or Justin Hartley from Tracker in your digital or paid social ads.
Sundar Pichai predicts that search will adapt to deliver more personalized and reliable results in a world flooded with content. He also acknowledges ongoing debates about content licensing and fair use, hinting at a future where content creators might directly benefit from their contributions to AI models.
A US appeals court dismissed TikTok's challenge to the sell-off bill, citing national security concerns over China's influence. TikTok faces a January 19, 2025, deadline to sell to a US partner or leave the country. It may appeal to the Supreme Court, seek an extension, or rely on President-elect Trump's pledge to save the app.