Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
CloudFox is a tool by BishopFox to enumerate cloud environments. The tool can be used by defenders to enumerate attack paths or by attackers to automatically enumerate resources that stolen credentials can access. Currently, AWS and Azure are implemented, with support planned for GCP and Kubernetes.
This is a guide on evaluating children’s toys for privacy. It begins with some tips for evaluating privacy policies for the toys and companion apps. The post then provides a deep dive into how to inspect Bluetooth and Wi-Fi traffic and what to look for.
An introduction by AWS to the new Terraform Test framework introduced in v1.6. The tutorial includes worked examples on writing tests for success, failure, and tests for resources or variable validations. It also includes examples on how to run tests in a CodePipeline.
This edition of CISO conversations with Nick McKenzie and Chris Evans discusses the evolving role of CISOs in cybersecurity. The conversation provides an insightful look into the evolution and best practices of bug bounty and vulnerability disclosure initiatives from the perspective of two industry leaders.
The FCC is working to protect domestic violence survivors from being tracked by their abusers through connected car features like GPS and is seeking input from vehicle manufacturers and wireless service providers on how to limit abusers' access to these features.
Android 15 introduces Private Space for added data protection on your Android device, which will allow you to hide and secure sensitive apps and files within an encrypted area.
Google introduced the V8 Sandbox as a default option on supported platforms in Chrome to protect users from memory corruption exploits.
The travel industry has been embracing AI to streamline bookings and personalize itinerary planning. Concerns arise about AI homogenizing travel experiences. However, social media has already been influencing travelers to flock to popular destinations, potentially diminishing unique cultural experiences. Some travelers base their whole itinerary off of a trip they see an influencer do on TikTok or Instagram. On this front, AI might actually prevent tourism from bottlenecking. AI is designed to consider the entirety of available data and provide personalized suggestions that reflect each traveler’s unique preferences.
Snapchat has announced a range of new partnerships with third-party data tools to help ad partners make the most of their ad campaigns, despite signal loss due to recent mobile privacy changes. Snap will serve as a key mobile platform partner for Snowflake’s Marketing Data Cloud, which will provide advertisers with encrypted, privacy-safe, and effective ad measurement. The brand is also partnering with AppsFlyer on an advanced privacy-centric measurement solution.
This article shares how to create interactive content that resonates with audiences on a deeper level than traditional social media posts. From quizzes and polls to user-generated content campaigns and giveaways, these innovative approaches not only boost visibility, but also foster a sense of community and brand loyalty.
Everyone knows “Book a demo” is equivalent to “Talk to a salesperson”. Only a very high-intent prospect who’s not an introvert, not a coder, and not busy will take up that sales call. Think about the specific goal the rest of your prospects are trying to achieve and how you can help them right away. Offer a lead magnet — something useful and engaging that lower-intent prospects will take advantage of. If prospects are coders, provide them with the code and let them experiment with it. If most of your visitors consistently have additional questions, offer Live Chat.
This site contains over 45 case studies on growth strategies used by the fastest-growing digital companies in the world. These span from SEO and branding to social media and PPC. It covers brands like Canva, WebMD, LinkTree, and more.
This handbook outlines 6 steps to naming a brand or product. It walks through 16 types of brand names, brainstorming strategies, 40 tools and resources, and over 100 examples. It displays domain and trademark research once you’ve selected a name.
73% of consumers prefer to watch short-form videos to learn about a product or service. 56% of marketers report that short-form video is the top trend they plan to invest in this year. One of the reasons why people love this format is that attention spans have gotten shorter over the last 20 years. Many people now use short-form apps like TikTok as a search engine because of its ability to provide valuable information in a short amount of time.
Conversational marketing is evolving beyond rudimentary chatbots with AI advancements that enable more tailored interactions at scale. By leveraging AI tools to track performance, personalize content, and anticipate customer needs, brands are now more equipped to support their customers at every stage of their buyer journeys. Omnichannel communication management, video transcription tools, and voice search optimization also enable personalized interactions at scale.
Dove has pledged to not use AI to represent women in its advertising - it has shared a set of prompt guidelines for using AI tools in more inclusive ways.
18 curated LinkedIn posts that cover LI profile optimization tactics, growth strategies, and content planning tips.
Sponsored
Fortune 50 companies like AWS and Google Cloud and fast growing startups like Vercel and Secureframe work with TLDR to reach our audience of over 4 million tech-savvy decision makers with highly customized campaigns (like this one!). We help manage your campaigns from end to end, ensuring that your performance marketing efforts hit your internal KPIs without breaking your budget. Learn more about working with us [3].
Reddit started as a monolithic Python application and has evolved its architecture into smaller microservices in Golang. It replaced database snapshots with real-time data replication using Kafka. Reddit has a dedicated metadata store built with AWS Aurora Postgres and it uses Flink Stateful Functions for modern rule-based content moderation.
This tutorial teaches how to use Next.js Server Actions for manipulating data. Server Actions, combined with React Server Components (RSC) and the App Router, can be used to edit entities within the database without the need to convert Server Components to Client Components for database interactions.
GitHub engineers use GitHub Copilot to semi-automate repetitive tasks like protobuf ID number generation. It also helps them stay focused by generating regular expressions on the fly. GitHub Copilot can be used for documenting code properly.
Simpler code is easier to understand and manage. Establishing clear design goals and non-goals can prevent over-engineering when complexity creeps in. Using less powerful tools can sometimes lead to simpler solutions as the constraints force less complex designs.
Great debuggers follow systematic processes rather than haphazardly tweaking code. They constantly form and test hypotheses, take breaks, and document their learnings from debugging.
Gemini Code Assist offers AI-powered assistance to software engineers in their IDE, similar to GitHub Copilot. It is available to try at no cost until July 11.
Airbnb has open-sourced Chronon, which is an open-source end-to-end feature platform that allows machine learning teams to easily build, deploy, manage, and monitor data pipelines for machine learning. It’s currently used by Airbnb and Stripe for major use cases internally.
DrawDB is a database entity relationship editor right in the browser. It can be used to build diagrams with a few clicks, export SQL scripts, and more.
Datadog's Real User Monitoring (RUM) package has an API that can lead to sensitive user data being accidentally sent to unintended domains. The "site" parameter can be confusing - developers can easily mistake it for their website domain. Instead of defaulting to Datadog's data intake domains, the RUM package constructs a new domain based on the provided "site" value, which could potentially send data to a domain the developer doesn't control. This happened to a company called Corporate Clash, where a misconfiguration led to user data being sent to an unauthorized third-party domain.
Google’s new Gemini Code Assist is an AI-powered coding assistant that helps programmers streamline development tasks. It runs within popular IDEs and can generate code, explain existing code, and assist with large-scale codebase changes. However, similar to GitHub Copilot, it can’t write code completely by itself and will probably need developer oversight to be fully effective.
A list of software bugs and outages that occurred on February 29th, 2024, including problems like payment terminal failures at gas stations and minor glitches in weather apps.
The US Army has announced a new policy for agile and lean software development practices.
zx is a tool for writing complex scripts in JavaScript. zx version 8.0.0 makes it smaller, faster, and adds new features like easier command handling and better process control, but changes some defaults and removes the SSH API.
Google has announced Axion, a new custom-designed Arm-based CPU for data centers that is meant to be more performant and energy-efficient compared to existing x86 and Arm-based solutions.
Sponsored
Ready to save up to $2,000 on every vacation for life? Dollar Flight Club has your back—TRY THE CLUB FOR JUST $1 IF YOU SIGN UP IN THE NEXT 12 HOURS [3]. Join over 1 million members saving on travel this year. You just missed out on 2024 flight deals like:
Microsoft will unveil its vision for AI PCs at an event in Seattle on May 20. The company is confident that its new Arm-powered Windows laptops will beat Apple's M3-powered MacBook Air in both CPU performance and AI-accelerated tasks. The laptops will feature Snapdragon X Elite processors from Qualcomm. Microsoft is planning to ship consumer models of its Surface Pro 10 and Surface Laptop 6 with Snapdragon X Elite processors instead of the Intel Core Ultra processors that the business-focused versions have.
Google has launched the Find My Device network for Android-based products. The Android Find My Device network can use the millions of existing Android devices to track down lost, stolen, and missing Android products. The network uses Bluetooth and works even when Android devices are offline and do not have a cellular or Wi-Fi connection. The network will also work with third-party Bluetooth trackers starting in May.
Elon Musk gave a 45-minute speech at SpaceX's Starbase facility in South Texas last weekend about making life multiplanetary, the booster for Starship, the upper stage, and SpaceX's plans to ultimately deliver millions of tons of cargo to Mars for a self-sustaining civilization. SpaceX has now completed 327 successful launches, with 80% of those involving used boosters. This performance has given Musk confidence that reusability can be achieved with the Super Heavy booster that powers Starship. While SpaceX's goals seem audacious, the company has proven that rocket reusability is a very viable thing, so its other goals appear a lot more achievable.
A group of scientists launched a stream of microscopic salt particles off the deck of a decommissioned aircraft carrier last Tuesday in Alameda, California, as part of an experiment to limit global warming by increasing cloud cover to reflect sunlight away from Earth. Very few people knew about the project beforehand as geoengineering projects are controversial and the team was concerned that critics would try to stop them. The experiment will run through the end of May, and visitors are able to view the experiment.
Sponsored
There are many genAI tools that can help you write code. But do they have the contextual data to help you fix errors in production? Sentry’s Autofix [8] understands what your users are doing when an error occurs, analyzes the error, generates a fix and even opens a PR. It’s like having an extra junior developer.
Meta's Threads has introduced developer documentation and a sign-up sheet for interested parties ahead of its API's public launch planned for June. The documentation details the API's current limitations and endpoints. Developers can use the API to track analytics and publish posts and media, among other things. Threads accounts are limited to 250 API-published posts and 1,000 replies every 24 hours, with a text post limit of 500 characters.
Open Parse lets users easily chunk complex documents the same way a human would. It provides a flexible library capable of visually discerning document layouts and chunking them effectively. Open Parse supports Markdown and tables. It is extensible, intuitive, and easy to use and learn. Sample notebooks are available.
Growing quickly requires a job that surrounds you with people who are smarter than you and gives you opportunities to fail, with a company that has a history of giving massive responsibility to people similar to you. Choose companies that are selective with hiring and target positions where success is not guaranteed. Look for people in the company who have similar profiles as you and see if they have been given outsized responsibility in the company to see if you have a chance to get promoted quickly. These selection criteria are heavily weighted towards startups.
It's easy to make an argument that large language models can improve internal efficiency in companies somehow. It's much harder to describe a believable way for them to make products more useful to customers. This article discusses ways to meaningfully integrate large language models into existing products. It covers how to think about the technology, revamping workflows, different ways to implement models, and more. The article also covers potential issues such as copyright law, data processing agreements, and provider availability.
TikTok has been working to launch a photo-sharing app.
llm.c trains large language models in C/CUDA.
Some banks would go under in a matter of weeks if their COBOL programmers were to quit.
The new team will ensure that Microsoft's games remain accessible long into the future.
HTMX provides most of the capabilities of a Single-Page Application with the simplicity of a Multi-Page Application.
Big Tech is using passkey technology to lock people into walled gardens rather than to provide a secure solution to everyone.
Sponsored
Even if you’re a startup, you can’t afford to cut corners on auth — especially when it comes to features like SSO. This free (ungated) resource [3] covers the essentials of SaaS user management — from 101 topics [3] to more advanced concepts.