Search the archive

Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.

Results

30,788 matches

THOM BROWNE WINS IN ADIDAS TRADEMARK BATTLE OVER STRIPE PATTERN

A U.K. court ruled against Adidas in its case against Thom Browne, affirming the legality of Thom Browne's four-bar stripe design. This decision and a similar U.S. ruling highlight the challenges of "trademark bullying," where dominant companies target smaller rivals. The verdict strengthens protections for designers and underscores the consequences of overreaching trademark claims.

2024.12.02
links.tldrnewsletter.com2 min readTLDR Design

SAMSUNG APPS TO FEATURE FRESH NEW ICONS IN ONE UI 7

Samsung's upcoming One UI 7, based on Android 15, will introduce redesigned icons for several stock apps, including Phone, Messages, Internet Browser, My Files, Gallery, Calculator, Cloud, Contacts, Camera, Voice Recorder, Clock, Settings, Calendar, Kids, and Reminder. These updates, which focus on simplicity, impact, and emotion, aim to provide a more modern and cohesive appearance. The beta release is expected in December, with the stable version launching alongside the Galaxy S25 series next year.

2024.12.02
sammyfans.com2 min readTLDR Design

DOING THE NUMBERS: DIGITAL ACCESSIBILITY AND SHIFTING LEFT

Companies are increasingly prioritizing digital accessibility, benefiting users and businesses alike. However, many reactively address accessibility, incurring high costs. Adopting a "shift-left" approach and integrating accessibility early in development reduces expenses significantly. Automated tools and robust processes, like defect capture and configuration management, enhance efficiency and prevent recurring issues, delivering substantial financial and usability gains.

2024.12.02
deque.com6 min readTLDR Design

HOW TO HELP YOUR TEAM NAVIGATE PRODUCT DISCOVERY AND WORK WITH EXECUTIVES

Product Discovery is crucial for designers to clarify ambiguity and frame problems effectively. Asking 'why', 'what don't I know', and 'who I can talk to' helps align user needs, business goals, and technical feasibility. Proactively engaging during kickoff meetings fosters collaboration, saves time, and enhances design outcomes while showcasing the value of design thinking.

2024.12.02
dataanddesign.substack.com6 min readTLDR Design

CREATIVITY IS THE ONLY THING

Creativity, a fundamental force for good, is being increasingly marginalized in favor of data-driven systems that suppress individuality and humanity. AGI challenges the value of human workers. Adapting to change to navigate an uncertain future may require abandoning conformist paradigms and embracing creativity.

2024.12.02
links.tldrnewsletter.com8 min readTLDR Design

GLYPH NEUE

This new icon library by Icons8 features 1,500+ free icons available in SVG and PNG.

2024.12.02
icons8.comToolTLDR Design

CRUSH YOUR TASKS IN FLOW STATE

Blitzit is a simple to-do list and ever-visible timer that supercharges productivity. It helps users prioritize what matters, eliminate distractions, and get things done in an unbreakable flow state.

2024.12.02
blitzit.appToolTLDR Design

AVOID READ-ONLY CONTROLS

Read-only form controls often confuse users and lack clear visual cues. HTML and ARIA implementations differ widely, with inconsistent screen reader support. Styling requires custom solutions - some browsers treat read-only inputs like disabled ones. While theoretically functional, read-only controls can create usability challenges, making them less practical for many applications.

2024.12.02
adrianroselli.com5 min readTLDR Design

INSIDE LUNA LUNA: THE AMUSEMENT PARK DESIGNED BY ARTISTS LANDS IN NEW YORK

André Heller's Luna Luna amusement park, which featured rides by 1980s artists like Keith Haring and Salvador Dalí, debuted in Hamburg in 1987. After decades of obscurity, it was revived with funding from Drake's DreamCrew and creative direction by Michael Goldberg. The installation, now at The Shed in New York, will run until January 2025.

2024.12.02
wallpaper.com4 min readTLDR Design

A WHOLE TYPOGRAPHIC UNIVERSE: WITH SEVEN SUB-FAMILIES, NAN RAGE WILL NOT LEAVE YOU WANTING FOR MORE

NaN Rage is a versatile typographic universe of seven sub-families - Beau, Slab, Sans, Soft, Poly, Quik, and Zipp - designed for seamless mixing and creative expression. Developed by a team of eight at NaN, it evolved from exploring Egyptian-style faces into a diverse collection suitable for long-form text and bold titling. Free trial versions are available.

2024.12.02
the-brandidentity.com4 min readTLDR Design

Sponsored

DOWNLOAD)

Stop wasting hours on repetitive tasks. HubSpot's comprehensive guide [4] reveals how top performers are using ChatGPT to automate their work and achieve 2x productivity gains.

2024.12.02
offers.hubspot.comSponsorTLDR Founders

BIG TECH STRENGTH

A brief analysis of market trends shows that while software stocks remained relatively flat this week, most of the "Magnificent Seven" tech companies saw positive gains, with only Nvidia and Tesla experiencing declines. The market dynamics continue to demonstrate that software companies are primarily valued based on revenue multiples, with the overall median multiple at 6.2x and varying significantly based on growth rates: high-growth companies command 10.1x, mid-growth 11.3x, and low-growth 4.7x multiples.

2024.12.02
cloudedjudgement.substack.com4 min readTLDR Founders

MICROSTRATEGY'S $37B+ BITCOIN BET

MicroStrategy, a publicly listed software company, has pivoted to focus heavily on Bitcoin (BTC), holding approximately $37B worth of the cryptocurrency. This shift began in 2020 when CEO Michael Saylor decided to convert MicroStrategy's cash reserves into Bitcoin, driven by concerns about inflation and currency devaluation. The company now offers Bitcoin-linked financial products, such as convertible bond notes, which cater to different investment appetites and capitalize on the demand for Bitcoin exposure without the need for direct crypto investments.

2024.12.02
readtrung.com8 min readTLDR Founders

NEVER OVERTHINK

This post recommends seven concepts for reducing overthinking and living a better life: practice morning pages to clear the mind, use the 5 Second Rule to overcome hesitation, embrace imperfection with the 70-20-10 Rule, recognize the spotlight effect to reduce self-consciousness, ask powerful questions to break mental loops, adopt cosmic insignificance therapy for perspective, and use meditation for presence. These strategies can help decrease stress, enhance productivity, and encourage bold actions, ultimately fostering personal growth and fulfillment.

2024.12.02
benmeer.com3 min readTLDR Founders

CROSSING 8 FIGURES IN ARR BY OPERATING LIKE A BOOTSTRAPPED PRODUCT

Streak, a Gmail-based CRM, grew to over $10M a year in revenue by focusing on small, powerful teams, staying profitable, and learning to say no to things like low-value customers and splashy marketing. In this post, founder Aleem Mawani shares the challenges of scaling thoughtfully, from pivoting during YC to navigating growth phases fueled by word of mouth and clever distribution hacks like the Chrome Webstore.

2024.12.02
indiehackers.com5 min readTLDR Founders

KROTO

Record and translate video guides in over 60 languages with AI.

2024.12.02
kroto.oneToolTLDR Founders

POSTIZ

Schedule posts, analyze performance, and manage all accounts in one place.

2024.12.02
postiz.comToolTLDR Founders

WHAT METRICS DO THE TOP SECURITY COMPANIES REPORT ON?

Leading cybersecurity and observability companies universally report on Revenue and Non-GAAP Operating Income metrics, with most also providing guidance on Free Cash Flow and customer-related metrics. Companies show varying preferences between Calculated Billings and Annual Recurring Revenue (ARR) reporting, with ARR emerging as a better indicator of business trajectory. The current market shows stable valuations, with median EV/NTM Revenue multiples at 16.4x. Companies are demonstrating strong efficiency metrics with a median Rule of 40 at 53%.

2024.12.02
mostlymetrics.com6 min readTLDR Founders

NVIDIA: PAST, PRESENT, AND FUTURE

Nvidia, founded by Jensen Huang 30 years ago, rose from among nearly 100 graphics card companies to become a dominant force in high-performance computing through its GPU technology. By advancing general-purpose computing with CUDA and capitalizing on AI trends, Nvidia has positioned itself as a leading AI infrastructure provider, growing significantly with the rise of deep learning and AI applications. Despite facing challenges such as competition and geopolitical risks, Nvidia continues to innovate and expand its offerings in hardware and AI software, maintaining its status as a pivotal player in the tech industry.

2024.12.02
generativevalue.com10 min readTLDR Founders

SEARCHING FOR INSIGHT

In the world of professional expertise and analysis, many roles serve more as a theatrical backdrop than genuine drivers of change. This reality spans across think tanks, sports journalism, and data analytics, where the work often exists primarily to legitimize the handful of influential voices at the top. The mounting pressure from AI adoption may not stem from machines being superior at these jobs, but rather from the revelation that much of this work was primarily serving as convincing window dressing all along.

2024.12.02
benn.substack.com4 min readTLDR Founders

WHY ENTRY PRICE MATTERS

This post explains an investment philosophy that requires each portfolio company to have the potential for a 70x return.

2024.12.02
tremendous.blog2 min readTLDR Founders

SHORTEST TIME TO IPO?

A software company achieved unprecedented success in 1983 by reaching $50M in revenue and IPOing in its first year - far shorter than today's average 13.6-year journey to public markets.

2024.12.02
saastr.com1 min readTLDR Founders

PROJECTSEND CVE-2024–11680 EXPLOITED IN THE WILD

ProjectSend is a moderately popular open source web application for hosting file-sharing servers. An authentication bypass vulnerability that was discovered in January 2023 and has had Nuclei and Metasploit templates available for months has just been assigned a CVE. The delay in the assignment of the CVE is problematic as VulnCheck researchers have noted only 1% of servers being patched and evidence of active exploitation on many others.

2024.12.02
vulncheck.com3 min readTLDR InfoSec

ANNIEMAC DATA BREACH IMPACTS 171,000 PEOPLE

AnnieMac Home Mortgage experienced a data breach affecting 171,000 people, with hackers accessing personal information like names and Social Security numbers between August 21-23. The company is offering free credit monitoring. It has assured that it hasn't seen any misuse of the stolen data.

2024.12.02
securityweek.com2 min readTLDR InfoSec

CODE FOUND ONLINE EXPLOITS LOGOFAIL TO INSTALL BOOTKITTY LINUX BACKDOOR

Researchers found a Linux malware exploit called LogoFAIL that hijacks device boot processes by bypassing Secure Boot. The weaponized code, discovered on a web server, can inject malicious firmware and potentially install a Linux bootkit, marking a shift from theoretical to real-world threat.

2024.12.02
arstechnica.com6 min readTLDR InfoSec

GAME ENGINES: AN UNDETECTED PLAYGROUND FOR MALWARE LOADERS

Check Point researchers have detected a new malware campaign that has infected over 17K machines since late June. The new campaign uses the Godot cross-platform gaming engine to execute GDScript code, which can trigger the GodLoader malware loader. The current variant of this malware employs several sandbox-evasion techniques such as checking for the presence of 3D acceleration and checking for the amount of free space available. After infection, the script adds the full C:\\ disk to the Microsoft Defender exclusion list and then downloads further malware from Bitbucket. The current variant targets Windows systems but Check Point researchers have provided PoCs for Linux and macOS.

2024.12.02
research.checkpoint.com7 min readTLDR InfoSec

FLYING UNDER THE RADAR - SECURITY EVASION TECHNIQUES

Cybersecurity is an ongoing cat-and-mouse game between attackers and defenders. Phishing techniques have evolved from simple credit card theft to sophisticated attacks using device mimicry, social engineering, and evasion tactics like randomized resources, multi-step redirections, and AI-powered tools to bypass traditional security measures. This post dives into these techniques.

2024.12.02
thehackernews.com8 min readTLDR InfoSec

EDR SILENCERS AND BEYOND: EXPLORING METHODS TO BLOCK EDR COMMUNICATION - PART 1

This article discusses a novel technique that blocks EDR (Endpoint Detection and Response) communications by manipulating the Windows Name Resolution Policy Table (NRPT) to redirect DNS queries for EDR domains to localhost or invalid IP addresses. The NRPT method can effectively prevent Microsoft Defender for Endpoint from sending data by manipulating DNS resolution, though it requires administrative permissions. The article also covers detection opportunities through PowerShell command execution and registry changes and suggests mitigation strategies for EDR vendors such as monitoring NRPT changes and implementing backup IP addresses for critical FQDNs.

2024.12.02
cloudbrothers.info4 min readTLDR InfoSec

Sponsored

BUYER'S GUIDE TO IDENTITY SECURITY IN THE CLOUD

Today's security teams must secure developer access, curb permission sprawl and stop identity-related breaches in hybrid and cloud environments — without sacrificing UX or productivity. Learn 4 essential criteria [11] that identity security solutions must offer to balance ease of use with stringent access controls. Get the guide by

2024.12.02
cyberark.comSponsorTLDR InfoSec

C/SIDE (PRODUCT LAUNCH)

C/side helps businesses monitor, optimize, and secure third-party scripts, improving client-side protections to prevent zero-day attacks and the exploitation of known vulnerabilities.

2024.12.02
cside.devTLDR InfoSec

HUMBLE

A humble and fast security-oriented HTTP headers analyzer.

2024.12.02
github.comGitHub repositoryTLDR InfoSec

PHISHING-RESISTANT MFA SUCCESS STORY: USDA'S FIDO IMPLEMENTATION

The US Department of Agriculture (USDA) primarily uses personal identity verification (PIV) cards for authentication but found that it could not solely rely on PIV cards for situations like when there were temporary employees or for the waiting period before a PIV card can be issued. To solve these issues, users were originally given an exception policy that allowed for username and password login, which was phishing prone. To improve its systems, USDA leveraged a centralized Entra ID system to roll out FIDO MFA using either Windows Hello for Business or FIPS-140 security keys. Leveraging FIDO + SSO allowed the USDA to protect over 600 applications through gradual organizational maturity.

2024.12.02
cisa.gov7 min readTLDR InfoSec

IMPORTANT CHANGES TO CLOUDTRAIL EVENTS FOR IAM IDENTITY CENTER

AWS IAM Identity Center is streamlining its CloudTrail events to simplify user identification in CloudTrail and enhance the correlation between IAM Identity Center users and external directory services like Okta or Microsoft Active Directory. Specifically, IAM Identity Center will replace userName and principalID fields under the user identity element in CloudTrail events with the user ID and Identity Store ARN when a user signs into the console or accesses the AWS CLI. IAM Identity Center will also be omitting the value of a group's display name in CloudTrail events when a group is created or updated. Specific examples and transition guidance are provided in the blog post.

2024.12.02
aws.amazon.com6 min readTLDR InfoSec

RANSOMWARE GANGS SEEK PEN TESTERS TO BOOST QUALITY

Cybercriminals are actively recruiting cybersecurity professionals on underground forums to develop sophisticated ransomware and dark AI models. They are aiming to enhance their malware's resilience and reduce vulnerability detection, reflecting a more professional approach to malicious software development.

2024.12.02
darkreading.com4 min readTLDR InfoSec

SPYLOAN ANDROID MALWARE ON GOOGLE PLAY INSTALLED 8 MILLION TIMES

McAfee discovered 15 malicious SpyLoan apps on Google Play that were downloaded over 8 million times, primarily targeting users in South America, Southeast Asia, and Africa with predatory loans while secretly collecting extensive sensitive data to facilitate extortion.

2024.12.02
bleepingcomputer.com2 min readTLDR InfoSec

QNAP ADDRESSES CRITICAL FLAWS ACROSS NAS AND ROUTER SOFTWARE

QNAP's recent security bulletin addresses 9 vulnerabilities - the most critical include an authentication bypass in Notes Station 3 that allows unauthorized command execution and an OS injection flaw in QuRouter that enables remote command execution.

2024.12.02
bleepingcomputer.com2 min readTLDR InfoSec

BLACK FRIDAY HITS A RECORD $74.4B IN SALES ONLINE, UP 5% ON LAST YEAR

Global Black Friday online spending rose to $74.4 billion, with US consumers contributing $10.8 billion, marking a 10.2% annual increase. Mobile devices drove 55% of sales, translating to $5.9 billion in revenue. High discounts on toys, electronics, and TVs increased consumer activity, indicating an early holiday shopping peak.

2024.12.02
techcrunch.com3 min readTLDR Marketing