MoMA's Pirouette exhibition explores design's impact through over 100 objects, including Milton Glaser's I ♥ NY sketch, the Rainbow Flag, Apple's Macintosh 128K, and experimental works shaping human behavior.
Today's bots can easily bypass traditional detection [5]—executing JavaScript, storing cookies, rotating IPs, and even solving advanced CAPTCHAs. Their attacks are more advanced by the day, fueled by growth in AI agents.
Trump's new 25% tariffs on Canada and Mexico mark a dangerous shift from his previous trade policies. These broader tariffs could disrupt manufacturing supply chains and potentially reignite inflation.
Like astronomers calculating the odds of alien life, startups face a chain of critical factors that must all work perfectly. Failures in any area - from product to team dynamics to market timing - can kill a company. Founders can improve their odds against startup "natural selection" by identifying their biggest risks early and focusing on their unique advantages.
Successful software companies grow beyond their initial markets in three ways: selling new products to existing customers, entering new industries, or expanding along their value chain. Analysis of public companies proves both high and low-revenue-per-customer models create billion-dollar businesses. Founders should start with laser focus on a specific market while keeping an eye on bigger expansion opportunities ahead.
Smaller teams can often outperform larger ones when they have the right ingredients: high talent density, versatile skills, deep experience, and strong trust. These traits allow small teams to move faster, reduce dependencies, and foster a sense of ownership. Small teams excel in exploring new tech, driving innovation, rapid prototyping, problem-solving, and aligning cross-functional efforts. "Fitscaling" with small, mighty teams will be the new competitive advantage as companies emerge from the "blitzscaling" era.
Chinese AI startup Deepseek's R1 model outperformed OpenAI's O1 on multiple reasoning benchmarks, solidifying its reputation in the AI community. Led by CEO Liang Wenfeng and funded by the hedge fund High-Flyer, Deepseek is focused on open-sourcing its innovative AI models and cutting-edge architectural advancements like MLA and DeepseekMoE, which have triggered price wars among Chinese tech companies. Deepseek prioritizes AGI research over commercialization, relying on a bottom-up organizational approach and a team of local, highly-driven talent.
Successful fundraising is linked to selling the team's strengths, addressing industry shifts, and demonstrating clear value. Effective decks include detailed unit economics, customer-centric market sizing, and clear runway calculations. Longer decks aren't better, so concise, impactful content is key.
Most high earners think they can't use Roth IRAs due to income limits, but there are actually four legal ways to contribute large amounts each year. This article breaks down strategies like the "mega backdoor Roth," which allows up to $70,000 in annual contributions, and shows how to involve family members in tax planning. Using examples from real situations, it explains how to maximize these accounts while avoiding common mistakes that could trigger IRS issues.
VC fund Varrock's founder shares key fundraising insights amidst the bear market. LPs prioritize concentration and ownership in venture investments, preferring high ownership funds that don't overlap. Despite rising crypto prices, many LPs lack dry powder, making fundraising more challenging now.
2025.02.03·
showerthoughts.substack.com·7 min read·TLDR Founders
Startups should aim for profitability as a strategic advantage rather than just survival. Founders play offense by using capital to enhance enterprise value and considering potential acquisition attractiveness. Playing defense involves focusing only on survival and ignoring deeper strategic opportunities.
A response to claims that genius peaks before 30, this article uses data from Nobel Prize winners to scientists to show how creative breakthroughs happen at all ages.
Many ransomware attacks start when a user runs a harmless-looking executable on their endpoint device — and chasing down every new install can be impossible.
A cyberattack on the Community Health Center affected over 1 million patients' personal and medical data. The breach, discovered on January 2, follows recent attacks on Frederick Health and NY Blood Center. Though access was quickly blocked, CHC is offering affected patients free identity theft protection and monitoring services.
A security researcher discovered a new jailbreak for ChatGPT that involves abusing a mechanism to confuse ChatGPT into believing that it's in the past (temporal confusion) and then asking ambiguous questions. This vulnerability allowed the researcher to ask ChatGPT for information such as how a programmer in the 1700s could create polymorphic malware with modern techniques. The researcher attempted to disclose this vulnerability to OpenAI with the aid of various government agencies, but the vulnerability has not been fixed.
AWS has remediated an issue with IAM use sign-in flow that could allow for a malicious user to enumerate logins. The vulnerability was due to a timing attack in which the server response times for a valid or invalid user varied. AWS remediated the issue by introducing a timing delay across all authentication failure scenarios.
Major cybersecurity tools meant to protect networks have repeatedly become vectors for mass hacking campaigns. From 2023-2025, vulnerabilities in products by Cisco, Citrix, Ivanti, Palo Alto, and more have led to widespread breaches affecting thousands of organizations and millions of individuals. This post dives into the brief history of these attacks.
The AWS GuardDuty team has released a tool called GuardDuty Tester to generate infrastructure and synthetic events to test GuardDuty alerts and actions. This post walks through deploying GuardDuty Tester and creating alerts and automations based on GuardDuty findings. AWS has cautioned users to not run GuardDuty Tester in production environments and ideally to use a dedicated account.
This investigation revealed how mobile apps, even with location services disabled, leak sensitive data through real-time bidding (RTB) systems and advertising networks, with Unity Ads, Facebook, and various data brokers collecting precise location data, device information, and behavioral patterns. It highlights how data brokers create comprehensive user profiles by combining Mobile Advertising IDs (MAIDs) with personally identifiable information (PII), suggesting that security assessments should examine not just individual data points but the entire data flow ecosystem, including third-party integrations and data marketplace vulnerabilities.
Clutch's Universal Non Human Identity Security Platform can provide organizations with a unified view across all these identities, regardless of the environment they reside in, tracking their access, origin, ownership, storage, and usage.
Texas has banned DeepSeek and social media apps Xiaohongshu and Lemon8 from government devices, citing security concerns about data harvesting. The move follows similar bans on TikTok. DeepSeek has gained popularity among U.S. users and emerged as an OpenAI competitor.
The EU AI Act prohibits AI systems that pose unacceptable risks, including manipulative systems, social scoring, unauthorized facial recognition databases, and certain emotion recognition technologies. Violations face fines up to €35M or 7% of annual turnover.
OAuth provides the perfect model for authenticating AI Agents as it is designed for auditable and secure delegation of access. OAuth adoption is scant and even where it exists, scopes are often very minimal and incomplete. This solution doesn't scale to tools where the AI is acting as the user's identity such as ChatGPT Desktop or Claude computer use.
KuCoin's operator pleaded guilty to running an unlicensed money-transmitting business and will pay $297 million in penalties in the U.S. for failing to implement required anti-money laundering measures.
Ads in TLDR don't interrupt the flow. They feel like part of the newsletter, matching the tone of stories readers already trust. Brands have found success reaching tech decision makers by becoming part of the conversation. Readers rely on TLDR for insights, making it a trusted space for advertisers. Learn more about advertising in TLDR.
X is suing major brands, accusing them of illegally boycotting the platform after Elon Musk's acquisition. The complaint alleges that the World Federation of Advertisers coordinated an ad pause due to concerns over X's brand safety policies, which led to significant revenue losses. X argues that advertisers collectively dictating brand safety standards harms competition and overrides consumer interests.
Diversity in advertising not only improves representation but also strengthens brand perception and consumer willingness to spend. Ads featuring diverse models led to stronger impressions of product variety and innovation and outperformed traditional brand messaging. The effect is spontaneous, meaning consumers naturally associate diverse representation with brands that offer more choices.
Most traffic drops are caused by shifting search intent, technical issues, or Google updates. Start by analyzing traffic quality to determine if the decline affects valuable visitors or just low-engagement users. Audit backlinks to identify lost or devalued links, evaluate content against top-ranking competitors, and optimize layout for better user experience. Compare performance with competitors, assess which pages still rank well, and use AI tools to uncover patterns in keyword fluctuations. Implement changes, track recovery over 4-6 weeks, and consider performing a forensic SEO audit if needed.
To maximize a $1,000 LinkedIn ad budget, use a personal profile (preferably a senior expert) for thought-leader ads, as they outperform company ads. Post consistently to identify what resonates, then boost top-performing content. Avoid LinkedIn's default targeting - build a wishlist of ideal companies using tools like Clay or Cognism, upload it, and refine by job titles. Keep content fresh to stay visible to prospects. Over time, this strategy builds authority, making you the go-to solution in your niche.
Brand+ optimizes brand awareness campaigns by targeting potential customers based on shopping, browsing, and streaming signals. Advertisers can deliver video ads across Amazon properties and premium publishers.
Google Sheets, Google Search Console (GSC), and the ChatGPT API together allow you to retrieve GSC data, analyze key SEO factors, and get AI-generated recommendations. First, create a Google Sheet and connect it to GSC. Create an Apps Script in the sheet by pasting the provided code and authorizing the necessary permissions. Run the script to fetch GSC properties, inspect URLs, and retrieve SEO data. Use the AI analysis function to generate optimization recommendations directly within Google Sheets.
Limiting product availability can drive retention and virality by making it feel scarce and socially engaging. Wordle, BeReal, and Thursday succeed by restricting access, turning usage into an anticipated event. Brands can apply this by using full lockouts (only available at set times) or "power hours" (extra value during specific windows). Effective strategies include daily exclusives, flash rewards, group challenges, and live events, ensuring time windows align with user behavior.
This piece discusses the tension between free speech and brand safety in digital advertising as Meta reduces content censorship. Advertisers worry about ads appearing next to controversial content, but users may not make that association. Traditional media has long placed ads without full control over adjacent content. Brands should research whether their audience truly links ad placement with corporate reputation before prioritizing brand safety concerns.
AI is shaping the rise of the ‘10X AI Marketer,' who streamlines workflows, rapidly refines campaigns, and leverages AI-driven insights for greater impact. These marketers achieve high-impact results faster than traditional teams by mastering automation, prompt engineering, and data analytics. As AI-powered tools take over manual tasks, marketing organizations are transforming into AI-native teams, consolidating roles and restructuring around intelligent workflows.