Search the archive

WALLET ISLAND

OnchainKit's new feature allows users to directly connect their wallet to a website without needing an extension.

CRYPTOPUNKS NFT FLOOR PRICE SPIKES 13% ON RUMORS OF IP SALE

The CryptoPunks NFT floor price surged 13% within hours following rumors that Yuga Labs, the collection's owner, is considering selling its intellectual property rights.

USDD 2.0 LAUNCHES WITH 20% APY

USDD 2.0 is set to roll out, offering a 20% APY fully subsidized by Tron DAO's reserves, with all interest pre-funded to a transparent address.

EIP-7702: OVERHYPED AND UNDERWHELMING FOR SMART WALLETS

EIP-7702's limitations include a reliance on EOAs, which undermines signer abstraction, introduces god-mode vulnerabilities, and eliminates predictable addresses.

HONG KONG COURT SERVES TOKENIZED LEGAL NOTICE TO ILLICIT TRON WALLETS

Hong Kong courts have begun serving tokenized legal notices to illicit Tron wallets and freezing assets tied to scams, setting a new standard for blockchain-based justice.

PHOTOSHOP LAUNCHES LIVE CO-EDITING IN PRIVATE BETA

Live co-editing is now available in Photoshop in private beta. The feature allows multiple users to edit the same document simultaneously. It enhances teamwork by streamlining collaboration, eliminating version control issues, and enabling real-time updates, fostering a more efficient and cohesive creative workflow.

LEAKED LETTER SUGGESTS JAGUAR'S DESIGNERS WEREN'T HAPPY WITH REBRAND

A leaked letter from Jaguar's internal design team revealed concerns over the brand's controversial decision to ditch its iconic logo during its 2024 rebrand. It criticized the outsourced project for disconnecting from the company's narrative. Jaguar has defended the process, saying it is part of the creative growth process. The bold overhaul has divided opinions among designers and enthusiasts.

AUSTRALIAN UGG-BOOT MAKER FORCED TO REBRAND AFTER TRADEMARK BATTLE WITH AMERICAN RIVAL

The Australian company “Ugg Since 1974” has rebranded to “Since 1974” for international markets following a lawsuit by Deckers Outdoor Corporation, the US owner of the “Ugg” trademark in over 130 countries. “Ugg” is a generic term for sheepskin boots in Australia, but Deckers has trademarked the term globally. The situation has sparked debate over cultural heritage and brand ownership.

IT'S TIME WE EXPAND OUR DEFINITION OF DESIGN

Belonging extends beyond physical spaces to tools like Figma, initially built for designers but now empowers diverse collaborators. Non-designers often feel hesitant to use such tools, fearing judgment. Figma aims to bridge this gap with FigJam, Dev Mode, and Figma Slides, fostering inclusivity and encouraging everyone to embrace their role in design.

THE UX OF LOGIN CODES

Login codes and other authentication methods often frustrate users with their intrusive and confusing experiences, highlighting the challenge of balancing security and usability. Improving this critical touchpoint is essential for enhancing user satisfaction and brand perception.

WHY IS THE UX JOB MARKET SUCH A MESS RIGHT NOW? — A COMPREHENSIVE EXPLANATION

The UX job market has become increasingly competitive, with even seasoned professionals struggling to secure positions. Factors like the expiration of tax credits, rising interest rates, an influx of inexperienced UX professionals from boot camps, automated hiring systems, and the shift to remote work have contributed to this challenging landscape.

HANDPICKED DESIGN PODCASTS

Discover podcasts that shape design's future, fuel your creativity, and keep you at the forefront of design trends.

MILLION DOLLAR HEADLINES

This compilation features 100+ hero sections of indie/small internet business websites that generate $1,000,000 or more.

FRESH BRANDING ELEVATES ROBERT ALEXIS TRAITEUR'S VISUAL IDENTITY

Robert Alexis Traiteur's rebranding by Paprika Design modernizes its visual identity with clean typography, a muted palette, and consistent platform elements. Balancing tradition with contemporary appeal, the update reinforces the brand's leadership in the catering industry.

WEDGE REFRESHES THE IDENTITY OF 'CANADA'S COCKTAIL'

Mott's Clamato Caesar underwent a modern refresh by Wedge, introducing the 'Bring on the Flavour' platform and a bold visual identity featuring Goudy Bold and a custom wordmark. The update ensures consistent packaging impact while preserving iconic brand elements and overcoming printing challenges on aluminum cans.

THE FIVE NECESSARY ELEMENTS OF AN EFFECTIVE INFOGRAPHIC

Infographics are powerful tools in graphic design. They transform complex data into visually appealing and easy-to-understand content. Properly designed infographics should include audience-appropriate material, strategic organization, visual appeal, and precise citations. They can enhance shareability, engage viewers, and leave lasting impressions, making them practical for memorizing information.

NEURALSVG: REVOLUTIONIZING VECTOR GRAPHICS WITH AI

Developed by Sagi Polaczek and collaborators, NeuralSVG uses deep learning to generate scalable vector graphics.

DESIGNING “NO RESULTS FOUND” PAGES THAT CAN ENGAGE USERS

Effective "no results found" pages engage users by using empathetic language, providing clear actions, and offering alternatives.

ART VINYL NAMES RECORD COVER ARTWORK OF THE YEAR

👉Download it here

FORTINET WARNS OF AUTH BYPASS 0-DAY EXPLOITED TO HIJACK FIREWALLS

Fortinet is warning customers of an actively exploited vulnerability in FortiOS and FortiProxy. The vulnerability allows remote attackers to gain super admin privileges via maliciously crafted requests to the Node.js websocket module. Fortinet reports that attackers are exploiting this vulnerability to randomly generate admin or local accounts and add them to new or existing SSL VPN groups.

OVER 660K RSYNC SERVERS EXPOSED TO CODE EXECUTION ATTACKS

Google Cloud and other independent security researchers discovered 6 new vulnerabilities in rsync, one of which is critical. When two of the vulnerabilities are chained together, attackers can achieve unauthenticated remote code execution on default installations of rsyncd. BleepingComputer detected 660K exposed rsync servers on Shodan but did not verify if they were vulnerable.

THE GREAT GOOGLE ADS HEIST: CRIMINALS RANSACK ADVERTISER ACCOUNTS VIA FAKE GOOGLE ADS

Criminals are tricking Google Ads users with fake ads to steal their account credentials. The scheme involves impersonating Google Ads and leading victims to fraudulent login pages. This malicious operation impacts Google's business and affects numerous customers globally.

OWASP'S NEW LLM TOP 10 SHOWS EMERGING AI THREATS

The article discusses emerging security risks in AI-powered software development, highlighted by OWASP's Top 10 LLM vulnerabilities. Key concerns include prompt injection, supply chain vulnerabilities, sensitive data exposure, and RAG technology risks.

RELIABLE SYSTEM CALL INTERCEPTION

Traditionally, ptrace is used for system call monitoring, modifying, and faking but this mechanism suffers from being very slow as it requires two traps for each system call. The author presents an alternative mechanism that uses seccomp user notify and BPF filters to replace this functionality. The author notes that this technique suffers from time-of-check to time-of-use attacks and should not be used for security-critical decisions.

DON'T USE SESSION (SIGNAL FORK)

The author advises against using Session due to security vulnerabilities, such as the removal of forward secrecy and misuse of cryptographic keys. Session's encryption practices are criticized for reducing security measures to a mere show, making it less trustworthy compared to other messaging apps. In summary, the author strongly recommends avoiding Session due to significant security flaws.

ORCHID SECURITY (PRODUCT LAUNCH)

Orchid Security automatically discovers applications and evaluates authentication and authorization flows to pinpoint weak spots and suggest areas for remediation.

ATTACKRULEMAP

This GitHub repository maps Atomic Red Team attack simulations to detection rules like Sigma and Splunk ESCU. The project helps security professionals test attacks and evaluate detection strategies effectively. Contributions are welcome, including testing detection rules on different platforms and providing feedback for project improvement.

CISO ASSISTANT

CISO Assistant is a tool for managing cybersecurity posture, compliance, and risk assessments. It supports multiple frameworks and automates various tasks like audit management and evidence collection. The app aims to simplify cybersecurity processes and save time for security teams.

‘GOODBYE TO MY CHINESE SPY' MIGHT BE THE LAST GREAT TIKTOK TREND

The US faces a potential TikTok ban, prompting users to humorously say goodbye to their "personal Chinese spy" - a reference to data privacy concerns. Users are posting videos thanking their "spies" for curating content and monitoring them, preferring TikTok despite security concerns.

2024 CVES IN REVIEW

Analysis of 2024's CVE trends shows decreasing severity scores, with average CVSS dropping from 7.09 to 6.9. Critical and High severity vulnerabilities declined, while total reserved CVEs fell 7%. WordPress-related vulnerabilities increased significantly, though this may indicate improved security maturity rather than declining security.

CISA DIRECTOR SAYS THREAT HUNTERS SPOTTED SALT TYPHOON ON FEDERAL NETWORKS BEFORE TELCO COMPROMISES

CISA's director Jen Easterly mentioned that threat hunters found suspicious activity from Salt Typhoon on federal networks before realizing it was part of a larger Chinese hacking campaign targeting U.S. telecommunications. By identifying and seizing virtual private servers leased by the hackers, CISA gained insight into the extent of the hacking campaign against telecommunications companies and provided assistance to potential victims. The incident highlights the ongoing challenge of defending critical infrastructure from foreign adversaries like China and the need for improved cybersecurity measures in vulnerable sectors like telecommunications.

LAZARUS GROUP TARGETS WEB3 DEVELOPERS WITH FAKE LINKEDIN PROFILES IN OPERATION 99

The Lazarus Group conducted cyber attacks through fake LinkedIn profiles targeting Web3 developers to distribute malware and victims were tricked into cloning malicious GitLab repositories, allowing the attackers to steal sensitive data.

NICKEL TAPESTRY INFRASTRUCTURE ASSOCIATED WITH CROWDFUNDING SCHEME

CTU researchers found connections between North Korean IT worker schemes and a 2016 crowdfunding scam, linking them to the NICKEL TAPESTRY threat group.

LEGITIMATE CHROME EXTENSIONS ARE STEALING FACEBOOK PASSWORDS

A recent attack targeted popular Chrome extensions to steal Facebook passwords and other data.

TIKTOK PREPARES TO SHUT DOWN APP IN US ON SUNDAY, SOURCES SAY

TikTok plans to close its app to US users on January 19. Users trying to access the app will reportedly be directed to a site with information about the ban and will have the option to download their data so it isn't lost. This may be temporary. It'll be up to President-elect Trump's Justice Department to enforce the law after he takes office on January 20.

SNAPCHAT LURES IN CREATORS IN NEW AD CAMPAIGN AMID TIKTOK DRAMA

Snapchat's new campaign emphasizes its role as a creator-friendly platform, highlighting its 15 billion daily interactions. As TikTok faces a potential U.S. ban, Snap promotes its tools, including account toggling, pinned content, and Spotlight ads, to attract creators who may be looking for alternatives. The platform saw a 50% year-over-year increase in creator activity and now boasts over 500 million active users.

WHAT IS NEEDS-BASED SEGMENTATION?

Needs-based segmentation divides audiences by their core desires and problems rather than broad criteria like age or location, making ads more relevant. Examples in the article include Target's sensory-friendly clothing line and Fenty Beauty's inclusive makeup range, which tailored products to very specific consumer needs. This approach strengthens customer loyalty and drives higher marketing ROI via better targeting.

IS YOUR RETENTION "TOO GOOD”?

In B2C subscription businesses, high retention rates can signal over-targeting core personas and missing growth opportunities. Accepting some early churn allows experimentation with broader audiences, increasing long-term revenue potential. The goal is to elevate the cohort floor - where churn stabilizes - by retaining customers after the initial drop-off. For example, Hulu raised its floor from 20% to 30%, which boosted its profitability. Retention strategies differ by churn timing. Early churn often points to onboarding issues, while later churn may require solving product-related problems like content gaps.

THE ANATOMY OF A BREAKTHROUGH “SERVICE-AS-A-SOFTWARE” BUSINESS

Chargeflow's growth is driven by its “Service-as-a-Software” model. It offers automated chargeback recovery with success-based pricing that eliminates upfront costs and commitments. The platform's seamless onboarding and strategic placement in Shopify and Stripe marketplaces promoted signups, while success reminders and a focus on merchant value drove retention. Chargeflow created a scalable, customer-centric solution that is attractive to merchants by blending AI automation with thoughtful GTM strategies.

PUNCHY MESSAGING TEMPLATE (GOOGLE SHEET)

This template, inspired by the book “Make It Punchy,” offers a structured approach to crafting product messaging. It guides users through brainstorming themes based on customer pains, desires, and qualities, developing value propositions, detailing benefits, enhancing clarity and impact, and transforming ideas into engaging stories. Featuring formulas and functions, the template is versatile for individual or team use.

LOTTIEFILES

LottieFiles simplifies the creation and use of lightweight Lottie animations for apps and websites. It has a library of customizable animations, editor tools, and integrations for platforms like React and Flutter. Lottie animations, being lightweight, scalable, and resolution-independent, enhance visuals with small file sizes and smooth performance. The tool streamlines workflows for designers and developers, making the process of integrating interactive visuals more efficient.

THE GOAL GAP: HOW THE CLASH BETWEEN BUSINESS AND CUSTOMER GOALS KILLS BRANDS (AND HOW TO AVOID IT)

ABM won British Rail's business by highlighting its disconnect from customers, staging a pitch that simulated poor customer experiences. This gap between the company's internal goals and customer expectations caused declining passenger numbers, as ads failed to align with real experiences. Similarly, Domino's Pizza lost customers by prioritizing cost-cutting over product quality but regained market share with a bold campaign addressing customer concerns and improving its pizza. The "Goal Gap" occurs when businesses focus on themselves rather than solving customers' problems, leading to lost trust and disengagement. Successful marketing prioritizes customer needs and positions the brand as a solution, reflected in all customer interactions.

ADVERTISING IN THE AGE OF ATOMISED FAME

Media fragmentation has made it tough for stars like Zendaya and Paul Mescal to gain cross-generational fame. Algorithms are prioritizing personalized content over universal appeal. Experts argue that brands need to pivot from big campaigns to smaller, coordinated efforts across channels that collectively leave a lasting impression. While TV used to dominate brand building, its influence is waning, and marketers must rely on AI to navigate the complexity of modern strategies.

WHERE DO YOU DRAW THE LINE BETWEEN PERSUASION AND MANIPULATION?

Persuasion starts to become manipulation when you do things that slowly take away the clear choice that is being made by a customer.

5 WAYS TIKTOK PROFOUNDLY CHANGED THE CULTURE

TikTok revolutionized how we consume content with short-form videos, built a new era of micro-niche influencers, and drastically shortened collective attention spans.

VALENTINE'S DAY EMAIL INSPIRATION

A collection of Valentine's Day emails from brands like BarkBox, Jameson Whiskey, and Reformation.

REFACTORING WITH CODEMODS TO AUTOMATE API CHANGES

Codemods are automated scripts that use Abstract Syntax Trees (ASTs) to manage large-scale code changes, particularly when dealing with breaking API changes or refactoring legacy code. They automate tasks like removing feature toggles or refactoring complex components. This article provides practical examples in JavaScript and shows how to write codemods, test them effectively, and compose multiple smaller codemods into larger transformations.

WHY DOES CLOUDFLARE PAGES HAVE SUCH A GENEROUS FREE TIER?

Cloudflare Pages offers an unlimited bandwidth free tier, unlike competitors with stricter limits. Practically, serving static websites consumes minimal resources on Cloudflare's network, and the free tier acts as effective marketing.