A U.K. court ruled against Adidas in its case against Thom Browne, affirming the legality of Thom Browne's four-bar stripe design. This decision and a similar U.S. ruling highlight the challenges of "trademark bullying," where dominant companies target smaller rivals. The verdict strengthens protections for designers and underscores the consequences of overreaching trademark claims.
2024.12.02·links.tldrnewsletter.com·2 min read·TLDR Design Samsung's upcoming One UI 7, based on Android 15, will introduce redesigned icons for several stock apps, including Phone, Messages, Internet Browser, My Files, Gallery, Calculator, Cloud, Contacts, Camera, Voice Recorder, Clock, Settings, Calendar, Kids, and Reminder. These updates, which focus on simplicity, impact, and emotion, aim to provide a more modern and cohesive appearance. The beta release is expected in December, with the stable version launching alongside the Galaxy S25 series next year.
Companies are increasingly prioritizing digital accessibility, benefiting users and businesses alike. However, many reactively address accessibility, incurring high costs. Adopting a "shift-left" approach and integrating accessibility early in development reduces expenses significantly. Automated tools and robust processes, like defect capture and configuration management, enhance efficiency and prevent recurring issues, delivering substantial financial and usability gains.
Product Discovery is crucial for designers to clarify ambiguity and frame problems effectively. Asking 'why', 'what don't I know', and 'who I can talk to' helps align user needs, business goals, and technical feasibility. Proactively engaging during kickoff meetings fosters collaboration, saves time, and enhances design outcomes while showcasing the value of design thinking.
2024.12.02·dataanddesign.substack.com·6 min read·TLDR Design Creativity, a fundamental force for good, is being increasingly marginalized in favor of data-driven systems that suppress individuality and humanity. AGI challenges the value of human workers. Adapting to change to navigate an uncertain future may require abandoning conformist paradigms and embracing creativity.
2024.12.02·links.tldrnewsletter.com·8 min read·TLDR Design This new icon library by Icons8 features 1,500+ free icons available in SVG and PNG.
Blitzit is a simple to-do list and ever-visible timer that supercharges productivity. It helps users prioritize what matters, eliminate distractions, and get things done in an unbreakable flow state.
Add website feedback with comments directly on live websites and make real-time edits integrated with generative AI.
Read-only form controls often confuse users and lack clear visual cues. HTML and ARIA implementations differ widely, with inconsistent screen reader support. Styling requires custom solutions - some browsers treat read-only inputs like disabled ones. While theoretically functional, read-only controls can create usability challenges, making them less practical for many applications.
André Heller's Luna Luna amusement park, which featured rides by 1980s artists like Keith Haring and Salvador Dalí, debuted in Hamburg in 1987. After decades of obscurity, it was revived with funding from Drake's DreamCrew and creative direction by Michael Goldberg. The installation, now at The Shed in New York, will run until January 2025.
NaN Rage is a versatile typographic universe of seven sub-families - Beau, Slab, Sans, Soft, Poly, Quik, and Zipp - designed for seamless mixing and creative expression. Developed by a team of eight at NaN, it evolved from exploring Egyptian-style faces into a diverse collection suitable for long-form text and bold titling. Free trial versions are available.
2024.12.02·the-brandidentity.com·4 min read·TLDR Design To stand out effectively, tailor resumes, prioritize clarity over aesthetics, and lead with impact.
Album covers showcase artistry, capturing music's essence and reflecting cultural moments.
Mushy's visual identity, created by Pánico Estudio, combines modern design with traditional artistry, using earthy tones and organic patterns to emphasize timeless craftsmanship and meaningful decor.
Sponsored
Stop wasting hours on repetitive tasks. HubSpot's comprehensive guide [4] reveals how top performers are using ChatGPT to automate their work and achieve 2x productivity gains.
A brief analysis of market trends shows that while software stocks remained relatively flat this week, most of the "Magnificent Seven" tech companies saw positive gains, with only Nvidia and Tesla experiencing declines. The market dynamics continue to demonstrate that software companies are primarily valued based on revenue multiples, with the overall median multiple at 6.2x and varying significantly based on growth rates: high-growth companies command 10.1x, mid-growth 11.3x, and low-growth 4.7x multiples.
2024.12.02·cloudedjudgement.substack.com·4 min read·TLDR Founders MicroStrategy, a publicly listed software company, has pivoted to focus heavily on Bitcoin (BTC), holding approximately $37B worth of the cryptocurrency. This shift began in 2020 when CEO Michael Saylor decided to convert MicroStrategy's cash reserves into Bitcoin, driven by concerns about inflation and currency devaluation. The company now offers Bitcoin-linked financial products, such as convertible bond notes, which cater to different investment appetites and capitalize on the demand for Bitcoin exposure without the need for direct crypto investments.
This post recommends seven concepts for reducing overthinking and living a better life: practice morning pages to clear the mind, use the 5 Second Rule to overcome hesitation, embrace imperfection with the 70-20-10 Rule, recognize the spotlight effect to reduce self-consciousness, ask powerful questions to break mental loops, adopt cosmic insignificance therapy for perspective, and use meditation for presence. These strategies can help decrease stress, enhance productivity, and encourage bold actions, ultimately fostering personal growth and fulfillment.
Streak, a Gmail-based CRM, grew to over $10M a year in revenue by focusing on small, powerful teams, staying profitable, and learning to say no to things like low-value customers and splashy marketing. In this post, founder Aleem Mawani shares the challenges of scaling thoughtfully, from pivoting during YC to navigating growth phases fueled by word of mouth and clever distribution hacks like the Chrome Webstore.
Record and translate video guides in over 60 languages with AI.
Revenue automation for B2B companies.
Schedule posts, analyze performance, and manage all accounts in one place.
Leading cybersecurity and observability companies universally report on Revenue and Non-GAAP Operating Income metrics, with most also providing guidance on Free Cash Flow and customer-related metrics. Companies show varying preferences between Calculated Billings and Annual Recurring Revenue (ARR) reporting, with ARR emerging as a better indicator of business trajectory. The current market shows stable valuations, with median EV/NTM Revenue multiples at 16.4x. Companies are demonstrating strong efficiency metrics with a median Rule of 40 at 53%.
Nvidia, founded by Jensen Huang 30 years ago, rose from among nearly 100 graphics card companies to become a dominant force in high-performance computing through its GPU technology. By advancing general-purpose computing with CUDA and capitalizing on AI trends, Nvidia has positioned itself as a leading AI infrastructure provider, growing significantly with the rise of deep learning and AI applications. Despite facing challenges such as competition and geopolitical risks, Nvidia continues to innovate and expand its offerings in hardware and AI software, maintaining its status as a pivotal player in the tech industry.
In the world of professional expertise and analysis, many roles serve more as a theatrical backdrop than genuine drivers of change. This reality spans across think tanks, sports journalism, and data analytics, where the work often exists primarily to legitimize the handful of influential voices at the top. The mounting pressure from AI adoption may not stem from machines being superior at these jobs, but rather from the revelation that much of this work was primarily serving as convincing window dressing all along.
This post explains an investment philosophy that requires each portfolio company to have the potential for a 70x return.
In 2024, startups on Carta experienced a 17% increase in capital raised compared to 2023, with significant disparities across funding stages.
A software company achieved unprecedented success in 1983 by reaching $50M in revenue and IPOing in its first year - far shorter than today's average 13.6-year journey to public markets.
Sponsored
Seemingly simple AWS misconfigurations can open the door for attackers, with devastating consequences.
ProjectSend is a moderately popular open source web application for hosting file-sharing servers. An authentication bypass vulnerability that was discovered in January 2023 and has had Nuclei and Metasploit templates available for months has just been assigned a CVE. The delay in the assignment of the CVE is problematic as VulnCheck researchers have noted only 1% of servers being patched and evidence of active exploitation on many others.
AnnieMac Home Mortgage experienced a data breach affecting 171,000 people, with hackers accessing personal information like names and Social Security numbers between August 21-23. The company is offering free credit monitoring. It has assured that it hasn't seen any misuse of the stolen data.
Researchers found a Linux malware exploit called LogoFAIL that hijacks device boot processes by bypassing Secure Boot. The weaponized code, discovered on a web server, can inject malicious firmware and potentially install a Linux bootkit, marking a shift from theoretical to real-world threat.
Check Point researchers have detected a new malware campaign that has infected over 17K machines since late June. The new campaign uses the Godot cross-platform gaming engine to execute GDScript code, which can trigger the GodLoader malware loader. The current variant of this malware employs several sandbox-evasion techniques such as checking for the presence of 3D acceleration and checking for the amount of free space available. After infection, the script adds the full C:\\ disk to the Microsoft Defender exclusion list and then downloads further malware from Bitbucket. The current variant targets Windows systems but Check Point researchers have provided PoCs for Linux and macOS.
Cybersecurity is an ongoing cat-and-mouse game between attackers and defenders. Phishing techniques have evolved from simple credit card theft to sophisticated attacks using device mimicry, social engineering, and evasion tactics like randomized resources, multi-step redirections, and AI-powered tools to bypass traditional security measures. This post dives into these techniques.
This article discusses a novel technique that blocks EDR (Endpoint Detection and Response) communications by manipulating the Windows Name Resolution Policy Table (NRPT) to redirect DNS queries for EDR domains to localhost or invalid IP addresses. The NRPT method can effectively prevent Microsoft Defender for Endpoint from sending data by manipulating DNS resolution, though it requires administrative permissions. The article also covers detection opportunities through PowerShell command execution and registry changes and suggests mitigation strategies for EDR vendors such as monitoring NRPT changes and implementing backup IP addresses for critical FQDNs.
Sponsored
Today's security teams must secure developer access, curb permission sprawl and stop identity-related breaches in hybrid and cloud environments — without sacrificing UX or productivity. Learn 4 essential criteria [11] that identity security solutions must offer to balance ease of use with stringent access controls. Get the guide by
Analysis Tools is a list of peer-verified linters and static analysis tools for various programming languages.
C/side helps businesses monitor, optimize, and secure third-party scripts, improving client-side protections to prevent zero-day attacks and the exploitation of known vulnerabilities.
A humble and fast security-oriented HTTP headers analyzer.
The US Department of Agriculture (USDA) primarily uses personal identity verification (PIV) cards for authentication but found that it could not solely rely on PIV cards for situations like when there were temporary employees or for the waiting period before a PIV card can be issued. To solve these issues, users were originally given an exception policy that allowed for username and password login, which was phishing prone. To improve its systems, USDA leveraged a centralized Entra ID system to roll out FIDO MFA using either Windows Hello for Business or FIPS-140 security keys. Leveraging FIDO + SSO allowed the USDA to protect over 600 applications through gradual organizational maturity.
AWS IAM Identity Center is streamlining its CloudTrail events to simplify user identification in CloudTrail and enhance the correlation between IAM Identity Center users and external directory services like Okta or Microsoft Active Directory. Specifically, IAM Identity Center will replace userName and principalID fields under the user identity element in CloudTrail events with the user ID and Identity Store ARN when a user signs into the console or accesses the AWS CLI. IAM Identity Center will also be omitting the value of a group's display name in CloudTrail events when a group is created or updated. Specific examples and transition guidance are provided in the blog post.
Cybercriminals are actively recruiting cybersecurity professionals on underground forums to develop sophisticated ransomware and dark AI models. They are aiming to enhance their malware's resilience and reduce vulnerability detection, reflecting a more professional approach to malicious software development.
McAfee discovered 15 malicious SpyLoan apps on Google Play that were downloaded over 8 million times, primarily targeting users in South America, Southeast Asia, and Africa with predatory loans while secretly collecting extensive sensitive data to facilitate extortion.
QNAP's recent security bulletin addresses 9 vulnerabilities - the most critical include an authentication bypass in Notes Station 3 that allows unauthorized command execution and an OS injection flaw in QuRouter that enables remote command execution.
A 2019 ransomware attack on Canadian medical testing company LifeLabs compromised 15 million patients' lab results and 8.6 million people's personal data.
Global Black Friday online spending rose to $74.4 billion, with US consumers contributing $10.8 billion, marking a 10.2% annual increase. Mobile devices drove 55% of sales, translating to $5.9 billion in revenue. High discounts on toys, electronics, and TVs increased consumer activity, indicating an early holiday shopping peak.