Whenever engineers say something can't be done, know that 9 out of 10 times, that's not the case. Engineers want to deliver high-quality, fantastic products as quickly as you want. You'll be surprised at what happens as you shift your focus from what can't be done to what can.
2024.02.05·newsletter.skiplevel.co·6 min read·TLDR Design The fusion of typography with motion design has opened new frontiers for creativity in the ever-evolving graphic design landscape. A stunning illustration of this trend is Mario De Meyer's "Type In Motion" project, where he uses Cavalry, an advanced animation tool, to bring letters to life, transcending traditional static design.
Women have played a massive role in shaping products, spaces, and experiences, yet they're often underappreciated. This historical dive into the role females played in the world of product design acknowledges the contribution they made.
Creativity is a mysterious process that can’t be forced. Creatives aren’t artists. They recognize and respect each other and often compare themselves to others they deem great. Creatives emphasize the importance of intuition, passion, disagreement in the creative process, and fear of losing their creative abilities.
Sponsored
Download this checklist by SecureFrame [6] for step-by-step guidance on how you can effectively implement AI while addressing concerns related to transparency, privacy, and security. In the checklist:
How we talk to each other, collaborate, and undertake creative tasks has meaningfully shifted since we introduced software. We’re starting to see the beginnings of another meaningful shift with AI, but we’re underestimating quite how substantial this shift will be. Startups integrating AI into their products from day one will have a huge advantage over existing companies adding it on top of their existing products.
This article reports on interviews with founders from companies at the forefront of AI, covering their views on the advent of AGI, how to think about LLMs, and simple tactics for founders on how to approach AI within their products.
According to Elon Musk, Neuralink has conducted its first FDA-approved surgical test of a brain implant. Techno accelerationism in action.
Valuation matters – more so to investors, but it matters. Your valuation, particularly at the later stages, is really the product of your revenue growth and free cash flow. This article breaks down all the details and offers some formulae you can use to benchmark your company's growth and valuation.
What's one simple, high-leverage action you could take today to improve your marketing? Send a thoughtful first email when someone signs up. Here’s an example.
Gather valuable feedback about your customers, products, and employees.
Create high-converting website widgets.
Build contextual internal linking at scale.
Want to know how the other side thinks? These are useful resources. Also interesting for founders who aspire to be angel investors.
Ford published its 2024 trends survey after conducting 16,086 online interviews in 16 countries. It found that 60% of American millennials would take a 20% salary cut for better work-life balance. Are we surprised?
This article breaks down a list of resources like books, YouTube videos, and free courses that take a would-be product manager from a newbie to a wizard in 12 months. Useful if you’re a founder new to product or you’re looking to pass on useful materials to new hires.
If you’re not personally already proven, you’ll likely need to have more traction with your startup before you can raise. If you sold your last company successfully, you’ll likely be able to raise a round without a product pretty easily.
Advertising to the biggest audience often means advertising to the average human. The average human likely isn’t who your startup is going for. Big crowds lack focus - factor that in when you’re allocating marketing budget.
Choosing to become a founder and having success with it means you get to take control of your problems. You don’t control the problem itself, but you get to control the types of problems you face – and that’s a privilege.
Sponsored
As enterprises race to adopt AI, CISOs and other cybersecurity leaders have a critical role to play. AI implementations have to be compliant and secure for business to reap the full productivity gains they expect to see. Download this checklist by SecureFrame [5] for step-by-step guidance on how you can effectively implement AI while addressing concerns related to transparency, privacy, and security.
Cloudflare has provided an update on a breach from October 2023 when a threat actor accessed its internal systems using stolen Okta credentials. Not rotating the compromised tokens post-Okta breach enabled access to Cloudflare’s Atlassian suite. No Cloudflare customer data or systems were impacted by this event.
Clorox disclosed that a 2023 cyber attack has already cost it $49M. The company estimates that the attack will cost another $50-60M in FY24. There are still no details about the attack but it is suspected that it was a ransomware attack.
AnyDesk reported that it suffered a cyberattack in which threat actors breached production systems. The attackers stole source code and code signing keys. AnyDesk has released a new version with new code signing keys and has reset the web portal passwords of all users.
This post enumerates methods for escalating privileges on EC2 instances to root/System by modifying the instance’s user data. An attacker can create a new user data script if an instance has the ec2:ModifyInstanceAttribute permissions, replace the old user data with it, and restart the instance. The post covers a method that can be used if the EC2 instance pulls user data scripts or artifacts from S3 and has permissions to modify those buckets.
This post provides a deep dive into an incident that Invictus responded to. The threat actor was unique in that it utilized a new method of persistence in which it set up a cross-account role. The post divides the threat actor's activities into three primary phases of attack and delves into the motives and impact of each one.
This article covers the sequence of events that led to the Microsoft breach disclosed on January 25, 2024. The article contains diagrams that describe the flow of events as well as information about the breached systems. It also provides detailed instructions for identifying and investigating these applications using the Azure portal.
Chalk captures metadata at build time. It can add a small 'chalk mark' (metadata) to any artifacts so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this. It can be used to create software security supply chain compliance reports automatically.
Prompt Security safeguards every interaction with GenAI in its organization, such as internal AI tools and commercial products with AI features, by checking each prompt and model response to protect against exposure of sensitive data, block harmful content, and prevent other GenAI-specific attacks.
Objection is a runtime mobile exploration toolkit powered by Frida that helps assess the security posture of mobile applications without a jailbroken device. It can be used to interact with the container file system, for SSL unpinning, and for memory dumping and patching.
The HeadCrab malware that targets Redis databases has been updated with new evasion techniques like fileless loading nearly a year after it was first disclosed. The crypto-mining campaign now has over 2,300 infected servers, which shows the threat actor is adapting to stay under the radar. HeadCrab 2.0 uses advanced techniques for stealth and persistence, demonstrating the attacker's sophistication as it aims to secretly mine cryptocurrency.
Access Now, in collaboration with Citizen Lab and other organizations, conducted a forensic analysis of iPhones belonging to members of Jordan-based civil society. It confirmed that nine individuals were targeted and/or infected with Pegasus spyware, including journalists, lawyers, and members of civil society.
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to disconnect Ivanti Connect Secure or Ivanti Policy Secure devices from their networks due to reports of Chinese hackers targeting these devices for espionage operations. It has issued instructions for updating and bringing the devices back online.
Joseph Garrison was sentenced to 18 months for a credential-stuffing attack on DraftKings. He stole $600K total from around 1,600 accounts by adding new payment methods.
VentureBeat has published an analysis and spreadsheet of the best companies hiring for cybersecurity in 2024 based on LinkedIn postings and GlassDoor rankings. Kaspersky Lab, ServiceNow, and Cisco Systems lead the rankings.
Mastodon, a decentralized social network, has fixed a vulnerability that could be exploited by threat actors to impersonate and take over any account.
Google Bard will be rebranded as “Gemini”. This will be accompanied with the release of an Android app and the introduction of the “Advanced” tier powered by “Gemini Ultra”. The change aims to align Bard with Google’s best AI models and will offer enhanced features such as expanded multi-modal capabilities and improved coding support. The launch is scheduled for February 7 and will be available on select devices, with plans for expansion later.
X is expanding access to its new vertical video ads, which are displayed within its dedicated video feed. The platform claims that 100 million users now engage with vertical video in the app every day. Based on its testing, X users are 7 times more likely to engage with an ad in vertical video compared to the same ad on the Home Timeline, while early adopters have seen 14% lower CPMs on average compared to ads in the Home Timeline.
A Johnson Box is a highlighted section of text at the top of a direct mail letter, email, or web page. It’s designed to grab attention and keep the reader on a path that leads them through the content. For example, “I amazed even myself” was used to promote a book about financial habits in the 1990s. This opener was effective because it laid the foundation for the whole promotion — a journey of personal and financial growth. The Johnson Box technique can be used in emails, landing pages, social media posts, videos, and product pages.
This article discusses the benefits of using the "chicken game", where urging the audience not to do something paradoxically prompts them to do it. The tactic sparks curiosity and a sense of challenge driven by psychological factors like reactance theory and fear of missing out. There needs to be a fine balance, but using it properly can yield positive results in ad performance.
It's impractical to expect anyone to go through thousands of reviews and be able to come up with actionable insights consistently. With a custom GPT, teams can find insights on bugs, comparisons with competitors, pricing challenges, support issues, brand perception, and more. This post contains a template for creating a custom GPT that you can use to process mass amounts of customer reviews or survey responses. It also provides several example prompts to use for additional insights.
Businesses can enhance their marketing and sales efforts by creating detailed B2B buyer personas. These personas can help businesses understand their customers' goals, objections, and challenges. A clear and detailed persona helps deliver more personalized and effective messaging and content throughout the buyer journey. This guide shares a template for creating personas that cover key aspects like roles, demographics, psychographics, business goals, and objections.
Investing in branding from day one for your cash-strapped startup will pay off in the long run. This guide covers early learnings from the founders of Studs, a 4-year-old startup in the ear-piercing space. The founders also share tactics in optimizing TikTok content, selecting suitable influencers for partnerships, and executing creative events. Incorporating branding into pre-launch strategies and nailing product-market fit before scaling and ramping up brand marketing is crucial for success.
A physical mail strategy may seem outdated in a digital-centric world, but there are unique advantages that make it worth considering. For instance, physical mail offers more personalized engagement, is perceived as less intrusive, and has great synergy with digital efforts for cross-channel effectiveness. There are potential drawbacks to keep in mind, including slower response times, higher costs, and difficulties in tracking results.