The Netflix TV app is undergoing its biggest redesign in a decade. The new interface features a top navigation bar, tailored recommendations, and a cleaner layout. Netflix is also experimenting with generative AI search and TikTok-style vertical videos on mobile. These updates support its push for more engagement, personalization, and alignment with its growing ad-based model.
2025.05.09·links.tldrnewsletter.com·3 min read·TLDR Design The Guardian has launched a redesigned global homepage and app focused on mobile use, blending print-style design with personalized features, and a flexible visual system. Editors now have more creative control, and content is presented more dynamically. It's the brand's biggest digital overhaul in ten years, aimed at balancing editorial curation with easy navigation while keeping the visual richness of print.
In large tech companies, “getting things done” means finishing work in a way that decision-makers value, not endlessly refining systems. Many mistake constant activity for progress, but real impact comes from delivering visible, company-aligned results and moving on. To be effective, employees must know when a project meets executive standards, declare it done, and shift to higher-value work.
Designers often assume others understand the context, leading to confusion. Creative briefs help clarify purpose, business goals, and design problems. They align teams, provide direction, and highlight user behavior changes. By asking key questions and focusing on the “why,” briefs show the value of design beyond visuals and aesthetics.
2025.05.09·dataanddesign.substack.com·7 min read·TLDR Design Design systems are evolving from UI kits to infrastructure. Automation, measurable ROI, and integration with code are now essential. Systems teams must prove value, streamline workflows, and scale impact through tooling, AI, and cultural influence. The future lies in efficiency, not just consistency — design systems are becoming design operating systems.
2025.05.09·joshcusick.substack.com·5 min read·TLDR Design EZsite AI helps you build pro websites and apps that auto-save to your database, capture leads with AI chatbots, and boost sales using AI automation. Edit every page element manually or with AI using its native database, API integration, and analytics.
Recraft is a premium image generation and editing tool. Store, share, create, fine-tune, upscale, and perfect your visuals.
Stay in flow and build 3× faster on v0, Lovable, and more. Vibesuite gives you instant notifications, sound alerts, and automatic tab switching, so you can prompt, code, and ship without distractions.
Despite long opposition, free pitching remains common in design, especially in downturns, as many clients still expect unpaid work. At a recent Design Business Association forum, leaders urged studios to set anti-pitching policies, build client trust, highlight impact in case studies, and confidently show their value, arguing this earns respect and attracts better clients over time.
Matt Willey and Jonny Sikov designed the identity for Helions, Jack Davison's new publishing house, to reflect the atmospheric feel of his photography instead of a fixed branding idea. The bold, analogue-style wordmark and red and black palette create a quiet yet intense look that can grow with the publisher's ambitions.
Personas are like movie protagonists: compelling, motivated, and rooted in real experiences. Strong personas have clear goals, authentic voices, and relevant backstories. They guide design with empathy and focus. Visuals should feel real, not generic, and teams should avoid creating too many personas to maintain clarity in decision-making and product direction.
2025.05.09·interaction-design.org·13 min read·TLDR Design Offering compact, efficient, and adaptable solutions for modern industrial and technological challenges, origami's folding principles inspire innovation across space, medicine, robotics, architecture, and product design.
Understanding the anatomy of letterforms helps designers choose typefaces wisely, improve communication, and enhance readability by recognizing key parts like stems, counters, ascenders, and terminals.
Sponsored
AI is transforming business – but securing it? That's a whole new challenge.
Food hall startup Wonder raised $600 million in new funding, pushing its valuation above $7 billion just months after acquiring Grubhub. CEO Marc Lore plans to double its current 46 locations by year-end, expanding its model of serving 30 restaurants from a single kitchen with under 30-minute delivery times.
Figma launched four new products that let designers complete entire projects without jumping to other apps. These tools—Sites for website building, Make for AI coding, Buzz for marketing assets, and Draw for vector illustration—directly challenge Adobe, WordPress, and Canva while making Figma an all-in-one platform.
YC has released its newest "ideas we'd like to see founders tackle" list, focusing heavily on AI applications from full-stack AI companies to voice assistants. Its top requests include AI personal tutors, robotics software tools, healthcare administration automation, and companies that turn designers into founders.
Pylon's sales engine defies SaaS norms—its AEs close up to 30 deals monthly without any outbound prospecting, driving $2M ARR per rep annually. Its streamlined approach automates everything: inbound leads book demos that instantly populate its CRM, conversations move to Slack instead of email, and trials start right after demos. This 1-6 week sales cycle delivers 95% gross retention and 140% net retention.
As AI evens the playing field, your "taste" matters more than ever. Stripe, Linear, and Square don't just preach quality—they build systems to scale it: review checkpoints at 20% and 80% completion, dedicated "red pen holders" for quality control, and creating "remarkable products" not just viable ones. Their playbooks work because they've turned subjective taste into objective processes that extend their vision to every customer touchpoint without slowing down execution.
Most founders are in a dangerous middle zone: more than 12 months of cash but not enough to hit metrics needed for their next round. Smart founders track monthly burn religiously, understand which expenses actually drive growth, and plan for 12 months beyond their fundraising target. The market has changed—raising on story alone doesn't work anymore when investors expect 3-4 years to reach your previous valuation milestone.
Lamatic 2.0 is a serverless PaaS with an Agent IDE, vector store integration, and seamless app connections for building and deploying AI agents.
Krea Video Training lets you fine-tune Krea's AI video model using your images and videos to create custom styles, motions, and objects.
Inferless enables stress-free deployment of machine learning models on serverless GPUs, with ultra-low cold starts and scalable pricing.
Churn kills your business in ways most founders never calculate. Sometimes as founders we assume there's always a new topline to chase, but preventing churn might actually be your biggest revenue opportunity hiding in plain sight. When a $150K customer churns in year one, you're not losing just that revenue—you're watching nearly $1M in lifetime profits evaporate. Factor in the "silent snowball" of unhappy ex-customers steering deals to competitors, and that single lost account potentially costs you $3.3M in total value.
We now live in three different worlds—digital experiences remove all effort, physical infrastructure falls apart from neglect, and wealthy people create bubble neighborhoods where friction becomes aesthetic. AI writes your essays while airport systems fail 700 times weekly. The rich get smooth experiences while everyone else deals with broken systems. This shift moves effort around rather than eliminating it, dumping the hardest work on those with least power to refuse it. Maybe we should see friction not as an enemy but as a signal showing exactly what needs fixing in our economy.
Private market valuations follow public market trends but with a delay and reduced impact. Nasdaq returns influence Series A valuations, with changes manifesting six months later and explaining only 7.5% of the variance. Interest rates have a stronger correlation, significantly affecting venture activity as they drop.
Communication is attention management—mention constraints briefly, then immediately pivot to solutions.
Forerunner, known for investments in Oura and Chime, anticipates future growth in the AI era.
Flexport CEO Ryan Petersen discusses the impact of new U.S. tariffs on global trade.
Sponsored
As the avalanche of AI-generated code transforms development practices, AppSec teams face unprecedented security challenges.
A new phishing kit called CoGUI was used to send over 580M emails to targets between January and April. The attack chain begins with an email impersonating a legitimate site with an urgent subject line. The email includes a link that checks if the victim's machine matches a series of criteria such as IP, browser language, OS, etc, and presents a fake login page if the criteria match or redirects the victim to the legitimate site if not. CoGUI is the largest volume phishing campaign Proofpoint is tracking.
Kickidler is an employee monitoring tool that can capture keystrokes, take screenshots, and create videos of employees' screens. A new ransomware campaign operates by using Google Ads masquerading as ads for RVTools, a free Windows utility for managing VMware vSphere deployments. This leads users to download a trojanized version of the software that includes a PowerShell backdoor that deploys Kickidler on the device. The ransomware operator then monitors the victim's (likely an administrator) machine to collect credentials for sensitive systems and off-site cloud backups without detection.
rand-user-agent, an npm package, was compromised in a supply chain attack that caused it to inject obfuscated code that activates a remote access trojan (RAT) on users' systems. Aikido detected the compromise on May 5, when its malware analysis flagged version 1.0.110. Researchers found obfuscated code hidden in 'dist/index.js', visible only by scrolling horizontally in the npm site's source view.
The PortSwigger research team developed a Burp AI extension that automatically documents a pentest based on the request history. The initial implementation was good at spotting Path Traversal vulnerabilities, but struggled with more complex vulnerabilities like XSS until the team added a regex translator to transform inputs. The team found that the AI could be directly asked to explain why it reported that a false positive was a vulnerability and how to improve its prompt to classify vulnerabilities better.
Advertisers use Traffic Distribution Systems (TDSs) to direct potential customers to highly targeted ads. Insikt Group has been tracking how cybercriminals utilize malicious TDSs to direct victims to the malware with the highest likelihood of success against the target. Insikt Group has identified a TDS known as TAG-124 that is used by multiple threat actors, such as the Rhysida Ransomware-as-a-Service operation, Iterlock Ransomware, and TA866/ Asylum Ambuscade, but notes that TDSs are hard to defend against because they occur so early in the cyberattack life cycle.
This article discusses memory safety approaches beyond language choice, emphasizing comprehensive solutions including sanitizers, fuzzers, and compiler-based mitigations. The practices include selecting robust distributions like Debian, using tools like Fil-C for C/C++ safety, and implementing runtime protections.
Rulehound is an index of publicly available and open-source threat detection rulesets.
CodeAnt automatically reviews pull requests, flags issues, and proposes fixes. It continuously scans and monitors code and dependencies for a wide range of quality and security issues.
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
Daniel Stenberg, the original author of the curl project, posted on LinkedIn about an increasing issue of AI-generated bug reports being submitted to the program on HackerOne. Stenberg has said that maintainers on the project are getting bogged down by “AI slop” reports that include hallucinated vulnerabilities such as one that he cites in the article in which the reported claimed to have found a “novel exploit leveraging stream dependency cycles in the HTTP/3 protocol stack” but the reporter continuously gave nonsensical responses to follow-up questions. Stenberg announced that any reporters of “AI slop” vulnerabilities will be banned from the project.
Google is enhancing Chrome security with Gemini Nano, an on-device AI model, to protect desktop users against scams through Enhanced Protection mode. New AI warnings on Android will also help users identify malicious notifications. Google claims these AI systems have already reduced airline customer service scams by 80% and blocked millions of scammy pages.
Ubuntu 25.10 will be the first major Linux distribution to adopt sudo-rs, a Rust reimplementation of sudo developed by the Trifecta Tech Foundation. This memory-safe alternative aims to enhance security at the privilege boundary while maintaining compatibility. The transition should be transparent for most users, though some niche features may not be included.
A federal judge has advanced a class action lawsuit against Delta Air Lines by passengers affected by the July 2024 CrowdStrike software outage.
Fake crypto exchange ads on Facebook are spreading malware through deceptive tactics like using celebrity names and trusted cryptocurrency exchange logos to lure users into downloading malicious software.
Europol has shut down six DDoS attack websites and arrested four individuals in Poland for running a network of platforms used for attacks.
The 2025 Google Business Summit revealed how Google is prioritizing helpful, reader-focused content over keyword-heavy posts. It's confirmed that recent algorithm changes have unintentionally favored larger sites, though efforts to fix this are underway. Creators are encouraged to diversify traffic sources beyond Google by using platforms like Pinterest, YouTube Shorts, TikTok, and email. Video and personal connection now impact search visibility, as social content increasingly appears in search results. SEO now centers on user satisfaction, clarity, and trust signals rather than length or backlinks. Google has urged creators to stop writing for algorithms and focus on truly meeting user intent.
Disney's direct-to-consumer operating income grew from $47 million to $336 million year over year, indicating stronger monetization across Disney+, Hulu, and ESPN+. Streaming has become Disney's core growth platform, with bundled offerings and premium tiers helping reduce churn and drive engagement. Advertisers like Lysol, Amex, and Poppi are buying into integrated ad formats, including in-show placements and contextual activations across Disney's entertainment properties.
David Protein reached over 60 million TikTok impressions and sold more than 50,000 products by leaning into affiliate content, TikTok-exclusive bundles, and live streams hosted by employees. Despite concerns around brand control and limited customer data, David used TikTok Shop to fuel organic retail demand, embed live selling into employee onboarding, test variety packs as discovery tools, and generate inbound interest from bodegas driven by “as seen on TikTok” signs and word-of-mouth momentum.