An AI Acceptable Use Policy (AUP) establishes guidelines on the proper deployment of generative AI to mitigate risks. This post navigates how to create one with real examples. Developing an AI AUP forces risk leaders to define controls and frameworks to oversee emerging generative AI given its potential negative impacts if utilized without oversight.
Mercari discusses the considerations that went into the design of its passkey implementation. The company chose to adopt passkeys to try to create a phishing-resistant environment. Complications encountered included issues preventing attackers from registering passkeys, problems syncing passkeys, and UX difficulties around using passkeys.
2024.02.16·securitylabs.datadoghq.com·8 min read·TLDR InfoSec Sponsored
DNS is an often-overlooked aspect of network security, despite being the 1st step of almost every malicious attack. Control D [12] makes DNS an easy problem. Block unwanted content, spoof your location, and browse faster. The best part? It’s all done from a modern UX and architecture [12]. No apps to install 🎉
KTrust aims to secure Kubernetes workloads with a continuous threat exposure management platform that provides risk prioritization, breach and attack simulation, and ransomware protection capabilities.
MSAK is a tool written in Python to help discover and test exposed standard and custom services of ModBus Servers/Slaves over Serial or TCP/IP connections.
Awesome GraphQL Security is a curated list of GraphQL Security frameworks, software, libraries, and resources. The list is divided into offensive, neutral, and defensive tools.
Microsoft’s threat intelligence team has captured evidence of foreign government-backed hacking teams interacting with OpenAI’s ChatGPT to automate malicious vulnerability research, target reconnaissance, and create malware.
Maxim Dounin, a core developer of Nginx, has left the project and created his own fork called freenginx after a dispute over the assignment of CVEs.
The US Department of Justice announced that a court-authorized operation has dismantled a botnet of hundreds of Ubiquiti Edge OS routers controlled by Russian cyber spies. The group, known as APT28 or Fancy Bear, was using the hijacked routers as a global espionage platform.
2024.02.16·threatresearch.ext.hp.com·12 min read·TLDR InfoSec lolcerts is a repository of code signing certificates known to have been leaked or stolen and then abused by threat actors.
A new wifi auth vulnerability has been discovered. It allows an adversary to skip messages 2 and 3 of the 4-way handshake, enabling them to complete the authentication process without knowing the network’s password.
Sponsored
Ready to supercharge your career [5] in 2024? Introducing Sidebar [5]: an exclusive, closely-vetted leadership program designed to propel you to new professional heights.
Meta announced that it will pass on Apple’s 30% service charge to advertisers for in-app purchases. It is aiming to leverage advertiser outrage in its battle with Apple over in-app purchase fees. By increasing costs for boost posts on iOS, Meta hopes to rally more allies against Apple’s control over the iOS app economy.
OpenAI is reportedly venturing into the realm of web search, aiming to challenge Google's dominance. Microsoft's Bing may potentially play a role in the new product. This initiative signals increased competition between OpenAI and Google, especially in the search engine landscape.
A medical courier brand wanted to expand the company beyond its local area. This required the brand to generate leads from around the US. Its team identified that users were interacting with its service area map on the website, so they created an anchored widget across the site with a map popup. This directed users to an email submission form. Over 6% of form visitors completed the form, which resulted in a significant increase in new leads.
Account-Based Marketing (ABM) entails choosing and prioritizing accounts based on intent, gathering intelligence individually for each account, and creating a tailored outreach strategy for each account. With effective ABM, marketers can enhance their engagement and increase their chances of success. This guide offers insights into when ABM makes sense, running ABM pilots, planning and executing campaigns, and analyzing results for ongoing optimization.
This post contains 25 content ideas that can be included in your next email campaign brainstorm. Ideas include highlighting social media comments, adding responses to Reddit posts, and using authority testimonials.
YouTube now allows users to incorporate or remix music videos into their Shorts. This provides an advantage over TikTok, since Universal Music Group recently removed its song catalog from TikTok. There are 4 tools that Shorts creators can use: Collab, Green Screen, Cut, and Sound. To get started with the feature, go to the music video you want to remix into a Short, tap the “Remix” button, and choose one of the 4 tools.
Pinterest released an annual color palette inspired by the platform’s 2024 trends. It dug into the worlds of fashion, interior design, graphic design, and the culture at large to compare its data to the macro industry color trends. The 5 color palette can be used to inform your own creative assets, product assortments, and seasonal color palettes. A one-pager PDF is also available for download.
Growth models are a powerful tool for understanding how businesses work and where to allocate resources to produce growth. They are often a useful exercise for the person building it. However, they are rarely adopted broadly within companies. Common pitfalls of growth models include using them to forecast, not putting them into a spreadsheet, and choosing the wrong person to own a model. This post contains additional advice for modeling and includes a growth model template.
The Landing Page Content Triangle describes the structure that your landing page should follow. Landing pages should answer “what?” and “who?” above the fold and “how?” below the fold. The top of the page must be extremely succinct and be limited to a headline, subheadline, and social proof. Below the fold gives you room to make your offering shine by showcasing your value propositions and use cases. Crucially, the writing must be clear and align with messaging on the growth mediums that lead to the page. Analytics, heatmapping, and A/B testing tools can also help optimize landing page performance over time.
Pou is a quirky orange alien plush that’s become a hit on TikTok. It has become a marketing goldmine for dropshipping businesses. This article sheds light on how marketing plays a big role in leveraging online trends for commercial gain. Creators are using their own platforms to push Pou-related merchandise. This truly underscores the intersection of digital culture and consumerism.
Duolingo's unconventional social strategy, which uses viral TikTok content, has led to an increase in new app downloads.
Demonstrating your ROI as a PMM can be challenging. This post contains tips and advice on how PMMs can build their product marketing profiles.
A roundup of this past week’s feature updates and trends on Google, Instagram, Pinterest, and X.
Sponsored
Ready to supercharge your career [5] in 2024? Introducing Sidebar [5]: an exclusive, closely-vetted leadership program designed to propel you to new professional heights.
Grant Lee, co-founder of Gamma, attributes the platform's rapid growth to 10 million users in 9 months to AI-powered content generation. His insights reveal the importance of building products without limitations, leveraging organic growth through creators, and maintaining a cash flow-positive approach to critical thinking.
TikTok introduced a native app for Apple's Vision Pro headset that offers an experience that represents a significant shift in how content will be consumed and interacted with. Other major streaming services are currently absent from the platform. TikTok's app allows users to engage with content and the community in a novel way, showcasing comments and profiles alongside videos.
It is important to conduct rigorous reference checks when hiring rather than thinking of them as checking off a box. This piece provides insights from experienced leaders on crafting specific probing questions to gain a holistic understanding of a candidate's fit and potential within the organization.
Incentive-based user acquisition strategies like referral programs and gamification often attract lower-quality users with worse lifetime value and engagement. Natural user acquisition, driven by genuine product value, leads to more sustainable growth and better user retention.
This article emphasizes the importance of analytics in product and business success. It identifies 10 common mistakes made during product development and offers a practical guide to navigate these challenges.
This article details a four-step process for incorporating business impact into a product roadmap: understand the overarching business objectives, convert these goals into a coherent product strategy, prioritize the problems based on their potential impact, and develop and implement the solution.
They build and maintain your test suite in Playwright + include unlimited parallel test runs on their infrastructure.
Sponsored
QA Wolf [12] offers a cost-effective approach to getting 80% test
This step-by-step framework helps you convert website traffic by writing sticky copy that grabs attention and speaks to your customers’ pain points.
Patreon's feature results writeup template offers three critical lessons that can enhance long-term product development processes: ensure cross-functional involvement, structure documents in stages with clear ownership, and implement steps to prevent experimentation errors.
Most people are not as open to feedback as they claim to be, especially when there are power dynamics involved. This video advises against unsolicited feedback to managers unless they've explicitly indicated openness to it. It also provides guidance on handling situations involving an incompetent manager.
How to effectively answer the common interview question "Why should we hire you?" in four steps: determine your unique value proposition, form a compelling narrative, align your answer with the company's needs, and conclude with a confident closing statement.
2024.02.16·shailesh-sharma.medium.com·5 min read·TLDR Product Growth models, often represented in spreadsheets, can aid in understanding business dynamics and resource allocation. However, they fail to be widely adopted due to unreliable forecasting and overcomplexity. It is important to focus on relative trade-offs rather than absolute predictions and ensure clarity in assumptions and ownership.
This article explores the challenge of balancing maintenance and innovation in product management, offering strategies to manage "keeping the lights on" tasks alongside driving value and growth.
Merely reserving calendar time isn't enough for productive deep work, especially for PMs. This article offers practical tips and a framework to help PMs integrate deep work effectively into their hectic schedules.
There are two things product leaders should keep in mind: you have as much ownership as you have credibility, and part of your job as a leader is to change hearts and minds.