Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Excellent tips on how to upgrade your email nurturing once a prospective customer lands on your website, reads content, or creates an account. Make it personal and optimize for the action you want, not click-throughs.
Convert your web visitors with personalized AI conversations.
CopyRemix uses AI to turn your user testimonials into full case study content.
Supercharge your growth with AI-powered cold emails.
Your network becomes your de facto personal board of advisors. Having people who are a few steps ahead of you in the game you’re playing, who you can ask your dumb questions to, is exceptionally helpful. Ask yourself if you have these people, and if you don’t, go and find them.
We’ve all heard the phrase “measure twice, cut once” before. But does it hold true in the startup world, where we’re told to move fast and break things? There are certainly some big decision areas where prudence is needed: layoffs, signing multi-year big contracts, or making big investments. Plan, plan, and plan again.
A really transparent take on publishing your own book in this day and age. Will Larson takes you through his previous books and around the decisions and financials around publishing his latest one. If you’ve ever thought about publishing a book, this is a great primer.
People are everything. Without them, you don’t have a business. When cost-cutting, try to ensure you’re still cultivating an environment that people actually want to be a part of.
Pipedive had 5 co-founders and sold for $1.5bn, so it can work. However, that’s probably the exception and not the rule. Generally, anything with over 3 co-founders starts to get complicated, from both an equity and management perspective.
We’re on the cusp of another potential upswing but we don’t want to get out over our skis. Some really simple advice on how to continue hiring while still avoiding future layoffs.
Okta is warning nearly 5,000 current and former employees that their personal information was exposed via Rightway Healthcare, a third-party healthcare vendor used by Okta. The exposed data includes full names, social security numbers, and medical plan numbers of affected employees.
Ace Hardware, a hardware store retailer-owned cooperative with 5,700 shops across the United States, China, Panama, and the UAE, suffered a cyberattack that has affected over 1,200 devices and is preventing stores and customers from placing orders. The company is working to restore 196 servers and has engaged with IT experts to help them restore the impacted systems.
The Socks5Systemz proxy botnet has infected 10,000 systems worldwide, turning them into traffic-forwarding proxies for malicious or anonymous traffic. The botnet has been operating since at least 2016 but has recently gained attention. The malware is distributed through phishing, exploit kits, malvertising, and trojanized executables.
The Wiki-Slack Attack is a social engineering attack that redirects business professionals to attacker-controlled websites using Wikipedia and Slack. Browser-based attacks, such as the Wiki-Slack Attack, are becoming the primary infection vector for ransomware. This article provides security recommendations to protect against browser-based attacks and increase cyber resilience.
This article discusses the use of Large Language Models (LLMs) to enhance the capabilities of threat intelligence analysts. It explains what prompt engineering is and provides an example of an ideally crafted prompt. The article also explores the practical applications of LLMs, including few-shot prompting and retrieval augmented generation (RAG) as well as embeddings.
File Integrity Monitoring is limited in the modern age as files containing things like access keys, API keys, and secrets are frequently used. Osquery on macOS can hook into the es_process_file_events table to allow users to define a set of sensitive files to monitor for any accesses or changes. This post contains a tutorial for enabling and configuring Osquery.
A new CTF from Wiz that focuses on an Amazon EKS cluster. The challenge contains 5 challenges with common EKS misconfigurations. A certificate is available upon completion.
Google Play Store has introduced an "Independent security review" badge for Android apps that have undergone a Mobile Application Security Assessment (MASA) audit. The badge is initially being launched for VPN apps due to the sensitive nature of the user data they handle. The MASA audit allows developers to have their apps independently validated against global security standards, providing more transparency and enabling users to make informed choices before downloading.
Rclone is a command line program to manage files on cloud storage. It supports over 70 different cloud storage products, including S3-compatible object stores. Rclone can be used to replicate many different common Unix tools such as cp, rsync, mv, mount, and ls across different cloud storage providers or file systems.
Part one of a series by the EFF on passkeys. A passkey is composed of 100-1400 bytes of random data stored on your computer in a safe location. They can be registered with a browser for a website and used to sign in. Passkeys can build in 2FA support which can increase security and convenience.
The Pixel 8/8 Pro are the first phones to enable ARM's MTE, a security feature that detects memory corruption at first occurrence. It's only available on Pixel as a developer option but can be configured for all apps. This article describes how to enable it on Android phones.
Apple's 'Find My' network could be abused by attackers to transmit sensitive information captured by keyloggers installed in keyboards. Researchers have created a PoC hardware device to highlight the risk to the public by integrating a Bluetooth transmitter into a USB keyboard. They demonstrated that it is possible to relay passwords and sensitive data typed on the keyboard through the 'Find My' network.
James Bethoty recaps some of the best vendors in various categories that he met with during the Global OWASP Conference. Categories range from buzzword of the year to best API security and best overall.
Discord will switch to temporary file links for all users by the end of the year to prevent attackers from using its CDN to host and distribute malware. All links to files uploaded to Discord servers will expire after 24 hours after the change rolls out. The new links will come with three parameters that will add expiration timestamps and unique signatures that will remain valid until the links expire, preventing the use of Discord's CDN for permanent file hosting.
This author attended the POC2023 conference and presented on Chrome exploit chains. He discovered a new WASM bypass method for the V8 sandbox. The author notes that the vulnerabilities were exploited through trial and error.
Google announced the November 2023 core update only two weeks after the October 2023 core search algorithm update finished rolling out. This month's core update involves a different core system than last month’s. SERP rankings might be volatile until it finishes rolling out, which will take up to two weeks.
Growth leads from ZoomInfo and LiveRamp share 4 things marketers should unlearn that were once viewed as a good model. They argue that reliance on a single model for marketing attribution isn’t ideal—models should be audited and adjusted every 6-12 months. In addition, they advise focusing on creating holistic programs instead of channel-specific campaign tactics and offering as much content upfront and ungated because buyers’ journeys are never linear.
Community is key to driving growth for many brands. Bossbabe’s playbook for retaining members and reducing refund requests starts with a welcoming onboarding experience that connects new users to one another. It’s also critical to use data to identify dropoff points and opportunities for users to “level up.” Users shouldn’t be overwhelmed with too much information at the start and instead should experience gradual, meaningful progression.
Since customers rarely purchase after their first point of contact with a brand, it is essential to nurture leads for future conversions. This piece shares 7 effective strategies, including SMS marketing, retargeting ads, and targeted email campaigns.
All retailers, this month, will be shouting their low prices, hot deals, and fast delivery methods. Use this checklist to ensure you have a solid abandoned cart campaign strategy, chatbots installed on your site, segmented campaigns based on customer LTV, and follow-up or retargeting campaigns ready post-BFCM.
Average cost per click has increased for 61% of industries and saw a general increase of 5% year-over-year. There might be fixable reasons why your brand CPCs are too high. Common issues include missing negative keywords, using the wrong big strategy, or a Quality Score issue.
Many content teams waste over 40 hours a month on unnecessary tasks due to poor systems, processes, and documentation. Instead, use a good content or cluster brief template and build a tone of voice guide, “about us” file, minimum quality guide, FAQ guide, and an SOPs library.
Brand and performance marketing are best used in harmony to benefit from their combined impact. Tech companies usually focus on product-led growth and performance marketing to grow revenue, but Airbnb recently credited a surge in earnings to its shift to brand marketing. This article describes when brands should invest in brand or performance marketing, as well as KPIs for each.
The U.S. Department of Justice has released several documents related to Google Search ranking, offering insights into its ranking methodologies. The documents discuss the three pillars of ranking, highlighting the importance of user interactions like clicks, scrolls, and hovers. They also touch on the role of user behavior in Google's ranking algorithms and the significance of understanding language through user interactions. There are links to the original documents available in this article.
A marketing strategy meeting helps you create a shared marketing vision and then turn it into a reality.
CEO Elon Musk is reportedly enabling the sale of dormant Twitter usernames, some priced at $50,000, through a new marketplace called @Handle.
A reminder to write your homepage for the “champion” who is tasked by their boss (the decision maker) to look into solutions for a problem they’re solving.
A developer attempted to rebuild Tailwind CSS with performance in mind in an effort to improve the performance of Tailwind CSS projects. They optimized the extraction of potential Tailwind class names using regex, reducing extraction time significantly. They also improved the parsing of class names and generated CSS rules efficiently. The new build time improved from 1.4 seconds to just 192ms, an almost 10x improvement.
Stateless services are easier to scale in distributed systems as more and more services can be added as load increases. However, for stateful services, certain techniques must be used for scaling, such as replication to external storage and distributed caching. In both cases, techniques like load balancers and sticky sessions are used to route traffic to the appropriate nodes.
The monorepo architecture is successfully implemented by tech giants like Google and Meta. The approach helps developers to share code, tools, and resources across teams and projects. This article outlines steps to architect a simple monorepo, including organizing the code and adopting a branching strategy like trunk-based development. It suggests minimal requirements for implementing a monorepo and goes through the steps of maintaining one.
A Meta staff engineer shares their career journey, highlighting key experiences and lessons learned along the way. Starting with their Microsoft internship, they emphasize the importance of feedback and learning from code reviews. They then discuss their growth at Meta, from mid-level to senior engineer, focusing on the significance of impact and tackling challenges. The author also talks about their transition to a distributed systems team and dealing with imposter syndrome. Finally, they describe their journey to the Staff Engineer level, which involved mentorship, building empathy, and consistent performance.
Public speaking skills are useful for software engineers in the context of tech presentations and meetings. This author covers key aspects of good public speakers, emphasizing the importance of open body language, avoiding common eye contact mistakes, improving posture, and keeping hands open. They also provide tips for boosting confidence through warm-up techniques, maintaining a dynamic speech rhythm, matching the volume of top speakers, and practicing.
Sponsored
Calling all developers! Sentry Launch Week [10] is coming. Tune in daily on YouTube for new product announcements and demos, and win credit for our new SWAG store. Got opinions? Share them on Discord to directly to Sentry’s engineering and tech teams. Too busy? Enter your email to get all the demos, blogs, & videos sent directly to you. Go here for details on it all. [10] Sentry Launch Week: Nov 13 to Nov 18, daily 9 am PT.
Nightwind is a Tailwind CSS plugin designed to provide a readily customizable and replaceable dark mode feature. It harnesses the established Tailwind color palette alongside your personalized color choices to instantly produce dark mode variations of the Tailwind color classes you employ. For example, when you apply a class like bg-red-600, Nightwind seamlessly transforms it into bg-red-300 within the dark mode setting.
The "ts-chan" module provides concurrency primitives for TypeScript/JavaScript inspired by Go's channels. It offers installation for Node.js, Deno, and browsers. The module addresses the issue of microtask cycles in JavaScript programs involving concurrent operations. It defines a protocol for implementing channels and includes reference implementations of channels and a Select class.
Vueform is an open-source framework for building forms in Vue.js. It standardizes the entire form-building process and gives you the power to customize styling, layout, and functionality while also taking important things like rendering, validation, and processing. Vueform comes with many form elements, like multi-file uploads and a date picker, along with a complete theming and templating system.
This is a case study of building a high performance JSON parser using Go. The parser supports streaming operations to reduce latency. Furthermore, the parser is compatible with the JSON API provided in the Go language. The parser also offers its own API, which is more efficient than the default JSON API.
Good documentation is clear, reproducible, and doesn't assume the reader's knowledge level. Documenting as you go along, rather than waiting until the end, is recommended because it allows for capturing details and maintaining clarity. Documentation should be modular so that parts can be expanded or skipped as needed. It should be reviewed by peers and ideally by potential users to ensure its comprehensiveness and usability.
Emails and details of Apple’s meeting with Google CEO Sundar Pichai have been released as part of Google’s antitrust case. The two companies have differing views on privacy.
An engineer pushed Next.js to its limits and tested the framework’s performance locally and in production by building a website with 5,000 SSR pages.