Search the archive

Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.

Results

14,500 matches

FIREDANCER LIVE ON TESTNET

Firedancer, the long-awaited new client developed by Jump, is now partially live on testnet. Jump has rewritten three major functional elements of the existing Solana Labs client with the aim of overhauling the software. This will bring scalability improvements for Solana. Early simulations show a potential for almost linear scaling as bandwidth and hardware capabilities increase. The full Firedancer is set for a testnet launch in H2 2024.

2023.11.17
twitter.com2 min readTLDR Crypto

HOW JANE STREET-BACKED ZETACHAIN AIMS TO EXPAND BITCOIN’S USE CASES

ZetaChain, a California-based startup, aims to include Bitcoin in the booming DeFi sector via its Layer 1 blockchain. Developers can build apps and get access to other networks without needing bridges or wrapped coins on ZetaChain. Notably, Zetachain enables the deployment of smart contracts that interact with native Bitcoin. Recently, it announced native Bitcoin support on decentralized exchange Sushi, enabling users to swap Bitcoin across 30 networks.

2023.11.17
techcrunch.com2 min readTLDR Crypto

THE FIGMA + ADOBE DEAL, EXPLAINED

Figma's VP of Legal discusses their efforts to explain Figma's role to regulators and how the collaboration with Adobe aims to enhance product design and development. The shared future includes leveraging Adobe's assets and tools like FigJam for improved collaboration and innovation in the design industry.

2023.11.17
figma.com3 min readTLDR Design

CONFIG 2024 SITE IS LIVE

Figma's next annual conference will be held in San Francisco and virtually on June 26-27, 2024. Approximately 8,000 people are expected to attend Config 2024, which will host 75 speakers and 50 sessions. The website is live and offers 75% off for very early bird tickets.

2023.11.17
config.figma.comToolTLDR Design

FREEHAND JOINS THE MIRO TEAM

Miro has acquired Invision's Freehand, a visual collaboration platform. Jeff Chow, its former CEO, is moving to Miro as Chief Product and Technology Officer, along with several Freehand Technical and Sales team members.

2023.11.17
invisionapp.com1 min readTLDR Design

BUZZ, CLICK, TAP: DESIGNING HOW HAPTICS AND DEVICES FEEL

As technology advances, small motors and sensors can be placed in more products, resulting in better-feeling devices. Designers and engineers at Google outline the processes and experiments they use to create innovative and pleasing haptic experiences on devices like Pixel and Nest.

2023.11.17
blog.google6 min readTLDR Design

THE MAGIC OF DETAILS: HOW UX MICROINTERACTIONS TRANSFORM PRODUCTS

UX micro-interactions are subtle system responses to user actions or system events (e.g., updating the order status, or receiving a new message). Usually, they are small visual or sound effects that follow some action and can help display the current system status, capture and hold attention, provide hints and guidance, and prevent errors.

2023.11.17
dribbble.com9 min readTLDR Design

MOST DESIGN “AWARDS” ARE NOT WHAT THEY SEEM TO BE

Design awards aren’t handed to designers and companies based on being scouted by someone. Designers have to submit their designs and pay fees of up to $2,250 to be considered for an award. An “award-winning” designer today means someone who’s invested in marketing, not necessarily someone great at design.

2023.11.17
blog.prototypr.io2 min readTLDR Design

RESEARCHERS DISCOVERED WHY YOU LOVE MINIMALIST PACKAGING SO MUCH

Packaging has been moving toward simplicity in recent years. Data now supports this trend. According to an analysis of more than 1,000 consumer goods, products with simple packaging tend to have higher retail prices. However, products from generic brands fail to reap the same premiums as minimalist packaging.

2023.11.17
fastcompany.com3 min readTLDR Design

PERFORMING A WEB ACCESSIBILITY AUDIT

97.4% of websites don't meet accessibility standards. This article will cover the first step to cleaning up the accessibility mess: performing an accessibility audit.

2023.11.17
sparkbox.com11 min readTLDR Design

HOW MUCH DOES IT COST TO USE AN LLM?

Reviewing the details of common queries to an LLM across the different models reveals that it is really cost-bound at the moment. With the latest OpenAI announcements and advancements with the open source models, that may be set to change.

2023.11.17
tomtunguz.com2 min readTLDR Founders

HOW TO CHOOSE THE RIGHT MARKETING CHANNELS FOR YOUR STARTUP

Most startups have fallen into the random acts of marketing trap. Picking channels randomly off a checklist and failing to ensure you have the right fuel and content to do the channel justice is a common mistake. This guide offers a framework for choosing marketing channels wisely.

2023.11.17
newsletter.mkt1.co17 min readTLDR Founders

WHERE DO CORPORATE POLITICS COME FROM?

A walkthrough of where corporate politics come from and ways to potentially root it out by undermining the incentives to do it. Figuring this out for any size organization could be a serious competitive advantage.

2023.11.17
breakingpoint.tech4 min readTLDR Founders

A DATA-DRIVEN LOOK AT THE RISE OF AI

This is a slide-heavy post from the Cerebral Valley AI Summit that takes a data approach to looking at the growth of AI. We all hear it constantly, but the data backing it up is pretty immense. Most interesting is the growth and subsequent collapse of developer interest.

2023.11.17
newcomer.co6 min readTLDR Founders

DECISIVE AND COURAGEOUS

You will sometimes have to make key decisions. These opportunities are few and far between, and it’s much easier to let them pass you by. It’s all about having the courage to make a decision, right or wrong, and to do it with conviction.

2023.11.17
jaredhecht.com2 min readTLDR Founders

ZIMBRA 0-DAY USED TO TARGET INTERNATIONAL GOVERNMENT ORGANIZATIONS

Google TAG discovered an exploit in the Zimbra email server 0-day (CVE-2023-37580) in the wild. It was used by 4 groups to steal emails, credentials, and tokens even after a public fix was released. This post-disclosure activity shows that delays leave orgs vulnerable. It urges rapid patching and updates to protect against ongoing exploits of known bugs.

2023.11.17
blog.google3 min readTLDR InfoSec

WP FASTEST CACHE SQLI EXPOSES 600K VULNERABLE WORDPRESS SITES

The is_user_admin function of the WP Fastest Cache plugin extracts the username from cookies to check if a user is an admin. However, the username is not sanitized and thereby can lead to SQL injection. A patched version of the plugin has been released. WPScan will be releasing its proof-of-concept exploit on November 27, 2023.

2023.11.17
bleepingcomputer.com2 min readTLDR InfoSec

REGO 101: INTRODUCTION TO REGO

This blog post series offers a gentle introduction to Rego, the policy language from the creators of the Open Policy Agent (OPA) engine. The series goes over basic Rego concepts and how to get started with OPA, intermediate Rego syntax, and types of values and rules.

2023.11.17
snyk.io10 min readTLDR InfoSec

FBI SHARES TACTICS OF NOTORIOUS SCATTERED SPIDER HACKER COLLECTIVE

The FBI and Cybersecurity and Infrastructure Security Agency (CISA) have released an advisory about Scattered Spider, a hacking collective that collaborates with ALPHV/BlackCat ransomware. Scattered Spider uses social engineering tactics and phishing to gain initial network access. It is a network of individuals with different threat actors participating in each attack.

2023.11.17
bleepingcomputer.com4 min readTLDR InfoSec

HOW TO CREATE AN AMI HARDENING PIPELINE AND AUTOMATE UPDATES TO YOUR ECS FLEET

Amazon ECS allows for the use of EC2 instances as a container host to increase user control over the ECS environment. This tutorial from AWS walks through the process of setting up an EC2 Image Builder pipeline that begins with an Amazon ECS Optimized AMI and then applies the CIS Docker host benchmarks to the AMI. It then goes through how to use a Lambda step function to update the ECS fleet with the new AMI. The walkthrough includes a CloudFormation stack to deploy the infrastructure automatically.

2023.11.17
aws.amazon.com5 min readTLDR InfoSec

AIKIDO (PRODUCT LAUNCH)

Aikido is an all-in-one solution that brings together multiple aspects of application security in one platform, including SAST, DAST, SCA, and CSPM.

2023.11.17
aikido.devTLDR InfoSec

AI-EXPLOITS

AI Exploits is a collection of exploits and scanning templates for responsibly disclosed vulnerabilities affecting machine learning tools. Each tool has subfolders that contain metasploit modules, nuclei, or CSRF templates.

2023.11.17
github.comGitHub repositoryTLDR InfoSec

TURBO INTRUDER

Turbo Intruder is a Burp Suite extension that allows for sending large numbers of HTTP requests and analyzing the results. It takes a Python script and thus allows for highly configurable payloads and analysis. Turbo Intruder can also be used to enable high-speed Intruder usage on Burp Community edition.

2023.11.17
github.comGitHub repositoryTLDR InfoSec

ADMINISTRATOR OF DARKODE HACKING FORUM SENTENCED TO PRISON

Thomas Kennedy McCormick, aka ‘Fubar’, a 30-year-old from Cambridge, Massachusetts, has been sentenced to 18 years in prison for his role in running Darkode. Investigators said Fubar was involved in the distribution of malware, hacking websites, as well as the theft and sale of personally identifiable information, payment cards, and bank account credentials.

2023.11.17
securityweek.com3 min readTLDR InfoSec

DEVELOPERS CAN’T SEEM TO STOP EXPOSING CREDENTIALS IN PUBLICLY ACCESSIBLE CODE

Researchers from security firm GitGuardian this week reported finding almost 4,000 unique secrets stashed inside a total of 450,000 projects submitted to PyPI, the official code repository for the Python programming language. Nearly 3,000 projects contained at least one unique secret. Many secrets were leaked more than once, bringing the total number of exposed secrets to almost 57,000.

2023.11.17
arstechnica.com4 min readTLDR InfoSec

THE MIRAI CONFESSIONS

An in-depth look at the three young cybercriminals behind the Mirai botnet. While none of the cybercriminals involved fit the mold of traditional cybercriminals, they successfully took down large swaths of the internet.

2023.11.17
wired.com18 min readTLDR InfoSec

STATE OF CLOUD SECURITY

A report from Datadog analyzing the security posture data from a sample of thousands of organizations using AWS, Azure, or Google Cloud found that many cloud workloads are excessively privileged. Specifically, long-lived credentials, MFA for cloud access, and IMDSv2 are not sufficiently enforced.

2023.11.17
datadoghq.com17 min readTLDR InfoSec

9 STEPS TO INCREASE USER ACTIVATION

Activation means your users have reached their ‘aha’ moment and developed a habit of engaging with your product. The first step is to map your entire funnel from signup to activation – which requires you to define the point at which a user is activated. Next, invest in UX writing, identify power users, gamify your product, and onboard users in a nurturing loop.

2023.11.17
linkedin.com2 min readTLDR Marketing