Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
This post explores the evolving perception of digital assets like tokens, likening their cultural impact and potential to historical shifts in industries such as fashion and technology, emphasizing the shift from physical to digital value.
Adobe has circulated an internal memo announcing the acquisition of California-headquartered text-to-video company Rephrase. The move is expected to bolster Adobe’s suite of Creative Cloud products. In particular, Rephrase will help the company empower its customers with the ability to generate professional-grade videos with just text.
Off/Script is an AI platform that helps anyone conceptualize, share, and monetize product mock-ups. Creators can design anything, including clothing, high-end handbags, and decor. For the most popular designs, the Montreal-based startup funds manufactures and ships them.
Figma's Dev Mode, enhanced by acquiring Visly, offers a developer-focused tool within the design platform. It facilitates seamless collaboration between designers and developers, breaking down traditional workflow barriers and improving efficiency in the design-to-development process.
A former team member who helped design the first version of Google Maps shares her opinion on why the recent redesign doesn't work. She also describes what could be improved and how Google missed a golden opportunity to step it up.
By embracing a UX marathon mindset, designers and product specialists can reshape the narrative, driving UX from the periphery to the core of business decisions. Such companies believe that product design does not end after the development and launch of the digital service application but that the product must be constantly improved and updated based on user feedback.
Creating negative urgency in design risks compromising the overall user experience, potentially losing users and damaging the company's reputation irreparably. In organizations, ultimately this could lead to staff retention issues and even compromised employee brand reputation.
A growing library of free, AI-generated, high-resolution avatars for design mockups, thoughtfully curated to suit all your creative needs. Now also comes with a plugin for Figma.
Auto Draw guesses what you're trying to draw and even suggests previous drawings that look like yours.
Check the contrast between different color combinations against WCAG standards.
The SUS, a questionnaire-based method to assess the usability of a system or product, has become an indispensable component in the realm of UX, shedding light on the user-friendliness and overall quality of digital platforms. It enhances user-centered evaluation, provides quantitative measurement, offers speed and simplicity, facilitates iterative design, supports decision-making, promotes consistency, encourages user feedback, and aids in resource allocation.
Louis Braille created his namesake reading system for the visually impaired in 1824. Samuel Gridley Howe developed the Boston Line Type in 1835 following a life-changing accident that blinded him. Based on the Roman alphabet, the Boston Line Type proved too complex to use effectively, leading to over a century’s delay in the adoption of the more user-friendly Braille system in the US.
In this interview, ex-Miro Growth leaders Kate Syuma and Viktoria Kharlamova discuss their comprehensive Onboarding Report for 2023. Their research deeply explores what makes onboarding empowered, how different strategies work for different types of businesses (B2B and B2C), and what we can learn from successful and unsuccessful onboarding efforts.
A collection of 100 books recommended by the design community categorized into nine thematic focus areas: user experience, interface and interaction, graphic design, product, theory & principles, business & strategy, creativity & innovation, tech & society, and career.
This is a list of this year's best inventions. The selection includes 200 innovations, ranging from AI to Wellness.
A well-crafted URL gives users a sense of what they will find before visiting it and provides human-readable context. A pretty URL makes your site more accessible, user-friendly, and SEO-effective.
It’s been five incredibly turbulent days at OpenAI, with the exit and then return of CEO Sam Altman. This article succinctly unpacks all of that dynamism and then goes on to explore whether OpenAI is the not-for-profit it declared itself to be in 2015 or something else entirely.
57% of venture-backed startups will have to go “back to market” in 2024 to raise more capital. 38% have 12 or less months of runway left. Many might not be able to pull off that next round, leaving them with few options.
The bell weather that is “Black Friday” has come and gone, and by all estimates, it was a blowout. What recession? There will be downstream effects here around interest rate hikes (or lack thereof) and potential investment loosening up.
The most important thing you can do at a tactical level is almost always the same: use the capital at this stage to double down on what is working whilst hiring great business VPs to bring balance to each domain.
Lessons learned by a long-time product manager turned founder, broken down into slides. This will help you ship products and features without using a defined roadmap.
Startup CEO coach Matt Mochary has compiled this fairly extensive resource library filled with wisdom on building companies and managing yourself as a founder or CEO.
As teams grow you have to figure out how to manage your team but also find unique ways to maximize potential. This post is a data-backed review of ways to engage your team and figure out what makes them tick.
Find sales leads with contact info by searching tech stacks.
Ian Hickson spent 18 years at Google. He left last week. This article provides an insider's take on Google over the years, particularly on how its culture has evolved. Hickson argues that there’s an existential cultural risk to the future of Google and calls out several leaders. Not all is lost, yet.
A long-term engineering and product leader at companies like Apple, Snap, and Pandora discusses lessons learned from his startup failures.
Early-stage companies mostly use titles to help send a message externally, but as you grow, they start to have a bigger impact internally and personally.
How you follow up matters when a user cancels their subscription. Your follow-up email to a cancellation request provides a short window to win them back or gather valuable insight into why they’re leaving.
We’ve seen the “open protocol” play done time and again. To a certain extent, OpenAI started like that but quickly veered away as soon as the business case got interesting. We saw it with OpenID/OAuth back in the day. This article looks at the Open Network for Digital Commerce. Always an interesting play in competitive markets.
An all-encompassing recap of the OpenAI fiasco. This will be studied for generations. If you haven’t followed the entire saga, this summary is a must read including all of the interesting angles and fall-out.
Sponsored
The fall report by G2 ranked the top vendors in the MFT space, placing MOVEit at the top and above established MFT vendors [5]. Grab a (free) copy of the G2 Grid infographic [5] to learn about key customer challenges and the leading vendors in the MFT industry.
Fortune 500 insurance giant Fidelity National Financial disclosed a cyberattack that shut down systems and disrupted title insurance and mortgage transaction services. The intruder accessed systems and acquired credentials. The financial and operational impact of the attack is still under investigation.
The National Cyber Security Centre (NCSC) and Korea’s National Intelligence Service (NIS) issued a joint warning that North Korea-linked Lazarus hacking group is exploiting a zero-day vulnerability in the MagicLine4NX certificate management and signing software to carry out supply-chain attacks.
Researchers at Akamai's Security Intelligence Response Team (SIRT) discovered that threat actors are using zero-day vulnerabilities in certain routers and network video recorder devices to build a Mirai-based distributed denial-of-service (DDoS) botnet called InfectedSlurs. The vulnerabilities can be exploited if the device manufacturer's default admin credentials have not been changed. Patches are expected next month.
What is the process of writing an exploit and getting it published as a metasploit module? This post outlines the process for transforming an authenticated Remote Code Execution (RCE) vulnerability in PRTG into a Metasploit exploit. It focuses on the development of the exploit itself rather than the steps for exploiting the RCE.
A post from Pulse Security that examines ways that a compromised pipeline running on a GitLab shared runner can be used to escape from its isolation, compromise the shared runner, and then compromise any other jobs on that runner. The post specifically focuses on the docker-in-docker executor on GitLab, but many of the techniques described can be generalized.
Burp Collaborator is a paid feature in Burp Suite that can be used as a listener domain for attacks like exfiltrating data via XSS. This post provides a tutorial on how to create a free version of Burp Collaborator using Cloudflare Workers to run on the edge and Discord to receive the messages. The worker code is provided.
Athena OS is an Arch Linux-based distro focused on Cybersecurity. Learn, practice, and enjoy with any hacking tool.
InQL is a robust open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
AWS Kill Switch is a Lambda function that can be used to delete a compromised IAM role or apply a heavily restrictive Service Control Policy to a compromised AWS account.
Aqua researchers found exposed Kubernetes secrets in public repos for hundreds of orgs/projects, including SAP & blockchain firms, posing severe supply chain attack potential. Secrets enable access to sensitive SDLC environments. This blog examines inherent Kubernetes secrets management risks, cases of critical data now exposed, and potential downstream impact enabling attacks.
Researchers tested Windows Hello fingerprint sensors on Dell, Lenovo, and Surface laptops - all with Match-on-Chip. They achieved auth bypass on all of the laptops using software/hardware sensor attacks requiring physical access. This post is an interesting read into how the researchers thought of possible ways to attack and ended up managing to get through the laptops.
This post presents a method to obtain the full ARN of an AWS IAM user or role from the AWS Unique ID. The method involves adding the Unique ID as a principal in an S3 bucket policy. If the IAM user or role still exists, AWS will provide the full ARN in the policy after saving it.
Hack The Box announced its 5th annual University CTF amidst a 4M cyber talent shortage, aiming to equip students with the latest skills and a $68K prize pool.
A collection of Black Friday deals on InfoSec-related products and services.
This is a collection of public breach reports along with Tactics, Techniques, and Procedures (TTPs) of threat actors
Nearly 80% of global online sales occur on a mobile device, but U.S. shoppers have been slower to adopt mobile e-commerce. Mobile is expected to overtake desktop for the first time this holiday season in the U.S., with more than half (51.2%) of spending online to take place on mobile.
Depositphotos put together its annual listing of emerging creative trends based on search queries among its community of 40 million users. Key visual trends include a global interest in street aesthetics, contrasting typeface combinations, atmospheric palettes, and a mix of 3D and 2D or sculptural XR projects in urban environments.
A construction materials company wanted to increase Google Ads spend without lowering ROAS. It noticed that different products achieved varying results within the existing PMax campaign, so they segmented it based on product performance. It then increased budget for over-performing products. This resulted in a 39% increase in revenue and 15% increase in ROAS, with an increased spend of 22%.