Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
As companies of all sizes embrace hybrid work, they’re turning to gamification to help boost productivity within certain domains, like onboarding, training, and collaboration. Gamification attempts to improve engagement and encourage creativity by adding an element of fun to the task, like winning awards or completing questions.
Here’s a probing question that invites a useful thought experiment – if your company could have only one single advantage over the competition, what would it be? The answer to this question could have a cascading impact on your prioritization and competitive positioning.
The cost-effective way to improve ads.
Get instant feedback on your sales emails.
Turn sharing links into conversions.
We’re seeing layoffs everywhere in tech, from small startups to public companies. The primary goal is to cut costs or change the composition of the business. Here are some signals that might suggest a layoff is on the way and how you as a founder or executive team can make the hard call.
Dealing with a lot and not breaking down is part of the founder's job. This podcast explores some tactics you can deploy to better understand your physical and mental state.
ServiceNow, a $150b market cap company, last week announced that its gen AI products drove the largest net new ACV contribution for its first full quarter of any of its new product family releases ever, including its original Pro SKU. We’re already seeing enterprise-level AI applications drive meaningful revenue growth – that’s cool.
Your focus determines your reality. This article has a collection of quotes and positioning statements that help encourage you to focus, reduce the noise, and think long-term.
We use the term “optimization” a lot in tech. Optimization is about making tradeoffs between multiple variables that create the best outcome as a whole, whilst maximization is taking one of those variables to the extreme. Understanding whether you’re optimizing or maximizing is important.
US-based venture investors took part in 1,863 European rounds in 2023 — a nearly 40% decline from 2022. It seems they’re now focusing on core markets.
Sponsored
Using aggregated usage data, Snowflake has identified security technology leaders [5] who are delivering next-generation applications and data sharing capabilities to enterprise security teams. Get the report to learn:
Anthropic disclosed a data breach after a contractor accidentally sent customer info to a third party. The breach impacted names and account balances. It was caused by human error, not a system breach per Anthropic. The news came right before the FTC announced its investigation into Anthropic's partnerships with Amazon and Google. Anthropic says the incidents are unrelated.
Akira ransomware group claims it breached Lush and secured 110GB of data. It is threatening to publish the data since negotiations have apparently failed. Passport scans were likely accessed, as well as financial, accounting, tax, project, and client docs. This incident demonstrates that Akira is a dangerous and flexible new threat that is able to hit major corporations.
Security researchers have discovered a new Golang-based malware loader called CherryLoader that mimics the icon and name of the CherryTree note-taking app to deceive users into installing it. Once installed, it drops either the JuicyPotatoNG or PrintSpoofer exploit and then runs a batch script to establish persistence. This article contains indicators of compromise.
This post dives into how the author went from wanting to work in infosec to deciding to pause and rethink what they actually wanted to do. You don't need to be an expert to enjoy learning about security. Working in security full-time isn't as exciting as it sounds. You can still explore security concepts without making a career out of it.
Hackers blur the lines between heroes and villains in the digital landscape. Though some are outlaws, others pioneer new possibilities. This post looks at the various types of hackers and their motives. Famous hackers have shaped the digital world through both ethical and illegal means. Hackers fundamentally think differently and use tools in unintended ways that can build up or tear down.
The Escape team underwent a project to spider 189.5M URLs to search for API keys and discovered 18,000 secrets, which included $20M in vulnerable Stripe tokens. This post covers how the team built a custom web spider using Golang and fasthttp along with the data analysis and verification pipeline. The process was deployed on a k8s cluster that could scale to 150 concurrent worker instances. The data collection took over 69 hours.
Sponsored
DNS is an often-overlooked aspect of network security, despite being the 1st step of almost every malicious attack. Control D [13] makes DNS an easy problem to solve. Block malicious domains, unwanted content and browse faster on all devices. The best part? It’s so easy your grandma can (probably) use it [13]. Available for personal use and teams of all sizes.
Above is an invisible network sniffer for finding vulnerabilities in network equipment. It is based entirely on network traffic analysis, so it does not make any noise on the air. Above is completely based on the Scapy library.
SecObserve is an open source vulnerability management system for software development teams that supports a variety of open source vulnerability scanners. It integrates easily into CI/CD pipelines.
Notation is a CLI project for adding signatures as standard items in the OCI registry ecosystem and building a set of tools around signing and verifying the signatures.
Researchers earned over $1.3 million hacking Teslas, EV chargers, and infotainment systems at Pwn2Own Automotive. Synacktiv won $450K for Tesla hacks. Day 1 saw $700K awarded, including $60K EV charger and $40K infotainment bounties. The 3-day event revealed 49 new auto vulnerabilities.
A post that provides a deep dive into the concept of Least Privilege as applied to AWS IAM. After providing some background and worked examples on how to determine the effective policy of an AWS principal, the post elaborates on why striving for Least Privilege may not be sufficient or productive in all cases.
A post from the Google Security team on creating large-scale security changes. It begins by detailing some scalability issues in the team’s attempt to roll out Strict CSPs. The post then delves into the tooling and metrics that were required to collect data and implement changes that scale better to the immense number of services that Google operates.
A critical vulnerability in Jenkins' built-in command line interface (CLI) allows attackers to obtain cryptographic keys that can be used to execute arbitrary code remotely. Update ASAP.
Cloud Threat Landscape is a comprehensive threat intel database of cloud security incidents, threat actors, tools, and techniques.
More than 5,000 GitLab servers have not been patched for a critical vulnerability that allows attackers to hijack the password reset process.
75% of top brands in the US and UK are targets of identity theft through Google Search Ads. The issue results in significant financial losses and creates considerable threats to customers. Common fraud practices include impersonating brands on Google Ads to steal customer data and hijacking affiliate programs to earn a referral bonus. Google said it is increasing efforts in safeguarding brands' reputations and shielding online shoppers, but bad actors are also constantly evolving their techniques.
You can now switch off read receipts via your IG Direct inbox. The setting is available within each individual chat. You can also turn off read receipts for all users in “Messages and Story Replies” settings. This can be handy for brands in managing customer expectations (in limiting customer angst).
A study found that people were more likely to appreciate “40% off” when the discount is revealed at checkout rather than upfront. The wrong approach makes users feel like information is being held hostage, like LinkedIn hiding profile viewers or Bumble pixelating faces until you pay. The right approach is to embed the element of surprise into your product while giving users some control and providing essential information to counterbalance any potential anxiety. Tactics include using a shuffle or random function, implementing secret features that users reveal, and randomizing user experiences.
Commenting on LinkedIn posts boosts your visibility. This post contains 10 golden rules and 10 fatal mistakes when commenting on posts. "Do’s" include sharing relevant links, tagging people to invite their insights, and making bold statements to make the poster rethink their opinion. "Don’ts" include leaving one-word comments, publicly announcing grammatical errors (use DMs), or self-promoting your own products or services.
A/B tests allow you to measure more accurately at the cost of making projects take longer. A/B testing is a great idea when there is a material amount of risk in making the change or an important change that is tough to detect without testing. It’s a bad idea when you are implementing a clear best practice, fixing something that is broken or unclear, or adding new features that you have clear evidence that users want. To run an effective A/B testing program, you'll need a testing tool, correctly configured analytics, sufficient knowledge of statistics, and the ability to explain results.
An n-gram is a contiguous sequence of ‘n’ items from a given sample of text or speech. Instead of focusing on single keywords, n-grams allow search engines to consider the context in which words are used. The N-Grams Text Analyzer App is free text analyzer app that shows unique and common n-grams between two bodies of text. It’s useful for analyzing why one page ranks better than another, optimizing your text for better n-grams usage, and featured snippet optimization. This post includes a link to the tool.
Tally is good for collecting feedback, market research, and even selling something. It can incorporate video, images, or descriptions. Typeform presents questions one by one, making it less overwhelming for survey respondents than traditional survey tools. Airtable lets you create forms with responses that flow directly into tables, making it easier to sort, filter, and share results efficiently. OpinionX is good for stack rankings. Coda works well for forms and documents and is more flexible than Survey Monkey or Microsoft Forms.
Marketing teams often focus so much energy on acquiring new customers that they miss out on harnessing the power of existing fans. Create content that truly resonates emotionally with your target audience in order to start building a fanbase. Identify and interact with vocal fans. Look for organic opportunities to showcase your most engaged fans to your whole audience. Whenever a customer reaches out with thoughtful feedback, make sure to respond personally and respectfully.
Nightshade, a project from the University of Chicago, aims to empower artists in the battle against unauthorized AI training by distorting image data, rendering it unusable for model training. It takes fewer than 100 poisoned images to start corrupting AI models. The idea is to protect creators from unauthorized use and force companies to pay to get consent before using their content to train the models. Glaze, another tool developed by the same team, prevents AI from being able to steal artists' styles.
The Milk Processor Education Program (MilkPEP) is organizing the Every Woman’s Marathon to connect with female runners and boost the profile of dairy milk against non-dairy alternatives. With input from an advisory board of prominent women runners, the event aims to create a holistic wellness experience beyond traditional marathons. MilkPEP believes that by creating disruptive and culturally relevant events, it will further its central mission of making milk more relevant in “modern wellness conversations”.
This article emphasizes the significance of LLMs to marketers and dissects their operational mechanics and intricacies. It covers the basics of how LLMs work, their limitations, and how users and marketers can work around some of their problems.
X is hiring 100 content moderators as its CEO prepares for a Senate hearing related to platform toxicity and child safety concerns.
This article is an extremely detailed walkthrough on how to build an app (specifically a palette generator) using Web Components and JavaScript. The app in this case is simple but complete. It’s entirely built with custom elements, has almost no dependencies, and runs fast. The author deep dives into the components and code, writes his own testing library (300 lines), and discusses some positives of using web components (like avoiding await/async or any other artificially introduced async behavior).
CockroachDB is regularly stress-tested and benchmarked using various benchmarking methods. These tests include daily benchmarks using TPC-C and TPC-E benchmarks on different node configurations, weekly benchmarks with larger clusters, and per-release benchmarks before major software updates. Ad hoc tests, such as scalability testing with varying node counts and workload types, are conducted to understand performance at scale.
Tailwind CSS is widely popular in web development today, but there are some notable downsides to it. It leads to ugly-looking HTML. The use of @apply in Tailwind is incompatible with other CSS frameworks, leading to vendor lock-in. Tailwind also encourages the use of `div` and `span` tags, whereas the modern web supports a much larger range of expressive custom elements and attributes.
High ratings alone don’t necessarily lead to promotions. It’s important to focus on adopting the behaviors of the next career level as these behaviors are transferable, sustainable, and ultimately more financially rewarding.
While AI can help generate code and provide solutions, developers should be careful to not become too reliant on the technology. Instead, they should approach AI tools with the goal of understanding and reviewing the generated code rather than blindly copying it. This not only allows for a better learning experience while coding, but also allows for easier debugging later on.