Eine Alternative zum Brotkauf ist das Backen des eigenen Brots in einem Brotbackautomaten. Dabei können Sie fertige Brotbackmischungen im Einzelhandel kaufen, oder Sie mischen auf Wunsch eine ...

Die besten Brotbackautomaten: Marktüberblick und Kaufberatung

Erfurt (ots) - Premiere: "Gong! Mein spektRakuläres Leben" (KiKA) Dramedy-Serie Eileen soll auf Klassenfahrt gehen - für sie eine Horrorvorstellung. Deshalb will sie

Neu im Oktober: Kinderfilme und -serien bei KiKA im Stream

Spätestens ab der Grundschule wird von Mama und Papa jeden Morgen eine Brotbox mit leckeren Kleinigkeiten für den Hunger zwischendurch gepackt. Klingt einfach, gestaltet sich aber in der Praxis manchm

Die besten Bento Boxen im Überblick: Unsere Favoriten und Fülltipps

Es ist damit erst 41 Jahre alt. Die Entwicklung des Ciabatta-Brots soll eine Reaktion auf die wachsende Beliebtheit des französischen Baguettes sein, da die Bäcker befürchteten, dass es ihr ...

Spaghetti Carbonara, Sushi und Ciabatta sind jünger, als du denkst

Die Holzofenbäckerei Gragger gehört zu denen, die die Renaissance des guten Brots in Wien (und Österreich) angeschoben haben. Umso überraschender war die Tatsache, dass die Bäckerei zuletzt ...

Anker verkauft Gragger-Brot

Nachdem die Holzofenbäckerei Gragger in die Insolvenz schlitterte, gibt es nun eine neue, ungewöhnliche Kooperation mit Ankerbrot.

Däuwel ist selbst Quereinsteiger und kann gut einschätzen, was andere an seinem Job abschreckend finden: die Arbeitszeiten. Denn Dienstbeginn ist zwischen 1 Uhr und 3 Uhr morgens. Viele junge ...

Fachkräfte: Ein Bäcker schmeißt seine Öfen später an – und wird für Azubis attraktiv

Endlich war es so weit: „Brotstock“, Tag eins, Fettes Brots eigenes Festival auf der ausverkauften Trabrennbahn mit 25.000 Menschen. Wobei – endlich?! Überraschungsgäste bei Fettes Brot: Die Antilopen Gang, Tocotronic, Kraftklub Um Punkt 18 Uhr ...

Fettes Brots Abschied: Mit Tränen in den Augen – und vielen Überraschungsgästen (M+)

Disney is being sued by Hollywood financer TSG Entertainment for allegedly withholding millions of dollars worth of film profits. The suit, filed

Disney sued for allegedly withholding profits from Hollywood film financier

Brots

brots

44,000 startups. 4,553 cities. “4 billion votes” It was such a blessing to get to know so many of your ideas and innovations from every corner of the world in 2021. The startup community amazed all of us with your hard work and persistence despite all of the challenges that we faced globally throughout last year. Not gonna lie, the competition got our hearts racing like Eurovision. We won’t let you wait for much longer, below are long-awaited results! ✨✨✨ To see who is a winner in each respective city, visit and pick a city. The name at the top of the list is the winner. (Compromised awards are under review.) startups.hackernoon.com The will announce the winners per region in their respective cities. Startups Winners Announcement Series 🔥 Central Europe Central Europe has always caught our attention with the talented pool of people in tech community. But were they able to get through 2021 despite the pandemic? Let’s cheers to the most outstanding amongst 4,500+ startups who have been working hard this year: Basel, Switzerland An overwhelming vote for ~ in their mission of helping machinery companies drive more service revenues from their installed base MachiQ Software Berlin, Germany We have with a whooping 538 votes! Let’s support Plan A with its mission to help companies to measure, monitor and reduce their environmental footprint. Plan A Düsseldorf, Germany It doesn’t get any easier with Kicking off in helping people organize online schedules more easily. EasyWeek! Geneva, Switzerland Manage code quality? We have to give props to for their startup! SonarSource Hamburg, Germany Taking over Hamburg is , an acoustic device to reduce noises in vehicle cabins. No more annoying sounds on the road 🚗 ReCalm Köln, Germany Small business? Hoping to manage your marketing campaign? is winning the vote! rankingCoach Lausanne, Switzerland is a Swiss-based company focused on cryptocurrency management solutions built for financial institutions. Metaco Leipzig, Germany empowers companies to operate and utilize drones for the most effective industrial data applications. FlyNex Mainz, Germany is growing sustainable digital mobility startups! Next Mobility Labs Munich, Germany wins for top-line, high-security international Identity Management! ORY Stuttgart, Germany Remote desktop application? Ask anywhere. AnyDesk Vienna, Austria , an IT company enabling privacy-preserving big data applications in the digital age. Mostly AI Zug, Switzerland Way to go 1762 votes for the first provably live pure Proof-of-Stake (PoS) CBC-Casper blockchain designed for real-world applications. CasperLabs! Nyon Calling for robust data solutions for impact-driven organizations! Havuta LLC Zürich is revolutionizing small business lending to give easy access to capital to those who need it most: SMEs ✨ Teylor Heidelberg, Germany is an innovative HR startup providing a solution for fast and efficient recruiting of employees with simple job profiles. Talk'n'Job Stuttgart, Germany Congratulations for winning this title! AnyDesk Moving on to our buddies in... 🔥 Eastern Europe Eastern Europe is home to many familiar big names in our start-up world. Trace history for Miro, Telegram, and Grammarly and you know where they are from. Who is the next generation for Eastern European startups? Budapest, Hungary is a platform for mobile app development, enabling tens of thousands of developers to automate integration, testing, and deployment. Bitrise I__ __ stanbul, Turkey Leading here is - a brand new software intelligence platform- helps organizations deliver faster, high-quality products by connecting their DevOps tools. Oobeya Kraków, Poland is a human cloud platform that connects global enterprises with European software houses, offering tech talent as a service. Talent Alpha Kyiv, Ukraine 281 votes for , an AI powered app where people can swap faces in the videos, GIFs and images in just a few seconds. Reface Sofia, Bulgaria 387 votes for __ __378, leading Blockchain and DLT solutions company that specializes in helping enterprises and blockchain startups design, build and scale innovative solutions using Blockchain & DLT! LimeChain Warsaw, Poland is a next-generation blockchain document management software (DMS). DoxyChain Yerevan, Armenia Whoever clicked to vote for was sure a vote, because it ended up winning as a full-service software provider delivering Artificial Intelligence & Machine Learning solutions for businesses. SmartClick smart Almaty Just like the name suggested, provides one pass to dozens of gyms and studios. 1FIT Debrecen got all the coders ranked figured out! CodersRank Kharkiv is complete solution digital assets management! Pics.io Minsk, Belarus with 243 votes is the first blockchain-powered sports media platform. Scorum Moscow, Russian Federation 1 e-grocery company in Russia with 26 votes and #1 on our HackerNoon board for Minsk. SberMarket Saint Petersburg, Russian Federation leads this area as a personal finance application that rewards responsible spending and savings. CoinKeeper Kazan, Russian Federation Smelling a sweet victory? 3d App designers for flower bouquets is in the house! Flowito Western Europe 🔥 Brexit? Pandemic? It seems like startups in Western Europe still keep their spirits regardless. Startups in Western Europe that stood out in votes this year go to: Antwerp is on a streak! As a bug bounty platform, it ensures online security through a crowd-sourced platform for computer experts. intigriti Belfast A record-breaking 10,003 votes? is an independent coffee shop. Come grab a coffee! Bobs & Berts Birmingham What’s happening in Birmingham? We have , an innovative UK-based advanced lithium battery developer aiming to accelerate the global shift to cleaner. Aceleron Bordeaux 30 is an open-source web framework for building modern apps and websites with Vue.js. NuxtJS Boulogne-billancourt is a software company that provides an in-store analytics platform to optimize operations. DiGEiZ Brighton In for some jam? offers musical education services. BIMM Bristol Another tasty victory for Western Europe is enabling the strongest digital encryption on the internet. KETS Quantum Security Brussels A fashionable win for , a social fashion network. You scan barcodes in fashion shops and see every influencer wearing those outfits! Share your wishlist with your friends and earn cashback. SCANDALOOK Cardiff is a technology company developing end-to-end digital connectivity for the point-of-care diagnostics market. Bond Digital Health London A whooping number of 1085 vote__ __ offers hardware based cyber-security solution for authentication and encryption in a wired local network. Crypto Quantique Edinburgh Hopping up on the crypto movement, just launched last year but they are already rocking it at making crypto accessible to everyone. Zumo Ghent 5379 votes for ! A Belgian InsurTech startup that helps insurance providers all over the world to better connect with their digital customers. WeGroup Glasgow specializes in single-cell analysis transforming the life sciences. Biomage Paris Show some love in the city of love for , a sports platform that is connected to a mobile sports coaching application. AirFit Aberystwyth enables artificial intelligence, data science & digital innovation solutions for the agriculture, biotech & life sciences industries. Agxio Norwich Congratulations for the amazing win of 1124 votes! WATR Charleroi Congratulations for your amazing win! Hirering Gibraltar Give a round of applause to Fortknoxter! Waltham Abbey is ruling the area with its amazing 72 votes! RPAIR Antwerpen Rocking up Antwerpen area is the rising startup ! Willow Egham What’s happening in Egham? Proudly announcing winning the Noonies this year! ATA.ONE Leicester Leicester is calling the name of as the winner for the region! DeadHappy Macclesfield Who else but ? Congratulations on dominating the award! AeroCloud Northern Europe 🔥 Want to listen to some music? Spotify. Need some games to kill time? Candy Crush. What about a quick call to someone you haven’t seen in a long time? Skype. These are all startups that originated from Northern Europe! Noonies, let’s take a look at the upcoming generation of startups from Northern Europe that hopefully will see an even bigger and brighter future. Gothenburg, Sweden Shipping was never made for small shippers, so took on the mission to built an end-to-end logistics platform to empower small businesses to spend less time and money on shipping and more time on growing their businesses. Sendify The Netherlands provides a virtual platform for many kinds of conferences and events. Let's Get Digital Helsinki, Finland A curated collection of public basketball courts in the Helsinki Metropolitan Area called . Everyone is welcome to submit to their local court. Koripallopaikat Lund, Sweden develops an antibiotic-free, safe and effective treatment of vaginal fungal infections. Gedea Biotech Luxembourg, Luxembourg 🚀 is a job-matching platform that connects developers and tech experts with CTOs and team leads from the best tech companies across Europe. 👾 nexten.io Malmö, Sweden Feeling studious, Noonies? __ __e is a tool for Google Classroom, that enables formative matrix assessment towards course learning objectives directly. StudyBe Oslo, Norway is the platform supports a unified API across all connected device categories, removing significant friction for app developers. Domos Labs Reykjavík, Iceland __ __s is a mobile-first technologically advanced neo-bank. Indo service #S__ __ tockholm, Sweden is the biggest blockchain start-up in Sweden. Double winner of the most prestigious nomination in Nordics 'NyTeknik 33-listan', winner of the Deloitte Fast 50, and now Noonies Award! ChromaWay AB T__ __ allinn, Estonia Passing 1000 votes is a fully digital and decentralized ecosystem for all actors in supply chain. OBORTECH Vilnius, Lithuania is an easy-to-use money app for cards and accounts. Via Genome, users can open a business or a merchant account or a personal one with dedicated IBANs, access transfers, exchange currency, process payments, and manage the funds. Genome Aalborg Digura A legaltech offering tenants fast, digital and reliable legal assistance Aarhus Partisia Market Design provides secure, simple, efficient solutions for auctions and exchanges realizing the potential of the market. Helsingborg is a hi-tech company developing cardiac occlusion devices and other vascular implants. Occlutech Tallinna is an AI-powered system for marketing automation in social networks. POSTOPLAN 🔥 Southern Europe Southern Europe’s economy went through a hard time this year due to a huge reduction in tourism. But our startups are of course always headstrong, from Spain to Italy and all the way through Greece. Who are the heroes rising amidst changes of Southern Europe? Skopje is a versatile software development company that solves the business challenges of SMBs, big brands, and brave hearts with awesome ideas. CodeChem Sliema Sounds like just a relaxing exhale. is a holistic health and wellbeing app built to allow users work on the development of their physical, mental and spiritual health Few Tajonar is a company of experienced business & industry entrepreneurs offering solutions to industries based on cutting-edge technologies. das-Nano Tarragona is a technology-based company focusing on the production of integrated microsystems. IMICROQ Terni is an ICT-based integrated solution that is able to modulate, respond, assist and learn to control most home activities. Mind Tirana is a video content and e-commerce platform for the Balkans built on top of an Albanian language specialized search engine. Gjirafa Torino develops and commercializes algorithms based on Artificial Intelligence to increase the autonomy of small satellite missions. AIKO T__ __ orres Buy online groceries like you would buy offline with personalized picking as fast as in 4 hours with Vedras 360hyper! Trento is a music-based platform built around streaming platforms that allow users to discover new emerging artists and make new friends. Brots 2021, what a YEAR. Congratulations to all of the startups that made it to the top winning list for Europe! Stay tuned for Startup awards in 2022 and let’s cheers to a new year of more innovative ideas, bold innovations, and robust creations from you, Europe 🌷 More Information: If you’re a winner, please answer ! If you’re a reader, participant, just a curious individual, consider answering one of our interviews . this interview here Read the FAQs about or . Startups here here To see all of the winners you may visit , pick any city and view the name that appears at the top. this site If you’re interested in partnering with us, we invite you to look through some of these or reach out to our business department. unique sponsorship options Perhaps creating your very own tickles your fancy or maybe you have a whole new idea for how we can partner! writing contest Thank you to all of our sponsors! We truly appreciate your contribution to the tech world and thus the future! The Startups Awards are sponsored by: , , , , , , , , , , Blockster Brex FreeCodeCamp LaunchDarkly Coil Udacity Udemy Vercel Asia Pacific Transgender Network Bybit Everscale Network This post was written by An Le and edited by Natasha Nel. If you have any questions or concerns or would like to report a discrepancy please email ellen@hackernoon.com.

Meet the Winners of Startups in Europe

Tel Aviv, Israel, June 9th, 2025/CyberNewsWire/--Available to the public and debuting at the Gartner Security & Risk Management Summit, BrowserTotal is a first of its kind browser security assessment tool conducting more than 120 tests to provide posture standing, emerging threat insights, URL analysis, extension risks, and more. Seraphic Security, a leader in enterprise browser security, today announced the launch of BrowserTotal, a unique and proprietary public service enabling enterprises to assess their browser security posture in real-time. Seraphic Security Seraphic Security BrowserTotal BrowserTotal The launch coincides with the Gartner Security & Risk Management Summit 2025, where Seraphic will be showcasing the new platform with live demos at booth #1257. Powered by AI, BrowserTotal offers CISOs and security teams a comprehensive, hands-on environment to test browser security defenses against today’s most sophisticated threats. Key features of the platform include: Posture analysis and real-time weakness detection
Insights on emerging web-based threats and phishing risks
A novel, state-of-the-art in-browser LLM that analyzes results and generates tailored recommendations
A live, secure URL sandbox for safely testing suspicious links and downloads
And more interactive tools that bring browser security front and center Posture analysis and real-time weakness detection Insights on emerging web-based threats and phishing risks A novel, state-of-the-art in-browser LLM that analyzes results and generates tailored recommendations A live, secure URL sandbox for safely testing suspicious links and downloads And more interactive tools that bring browser security front and center "Web browsers have become one of the enterprise's most exploited attack surfaces," said Ilan Yeshua, CEO and co-founder of Seraphic Security. "Web browsers have become one of the enterprise's most exploited attack surfaces," said Ilan Yeshua, CEO and co-founder of Seraphic Security. "With BrowserTotal, we're giving security leaders a powerful, transparent way to visualize their organization’s browser's security risks, and a clear path to remediation. What makes this truly groundbreaking is that we're democratizing access to enterprise-grade security analysis. By making BrowserTotal freely available to the entire security community, we're not just protecting individual organizations; we're strengthening the collective defense against increasingly sophisticated web-based threats." "With BrowserTotal, we're giving security leaders a powerful, transparent way to visualize their organization’s browser's security risks, and a clear path to remediation. What makes this truly groundbreaking is that we're democratizing access to enterprise-grade security analysis. By making BrowserTotal freely available to the entire security community, we're not just protecting individual organizations; we're strengthening the collective defense against increasingly sophisticated web-based threats." "We created BrowserTotal because we saw a critical gap in how organizations understand and prepare for browser-based attacks," said Avihay Cohen, CTO and co-founder of Seraphic Security. "This isn't just another security tool, it's an educational platform that lets security teams experience firsthand how sophisticated these threats have become. My hope is that by making this technology freely available, we can elevate the entire community's awareness and readiness against the next generation of web threats." "We created BrowserTotal because we saw a critical gap in how organizations understand and prepare for browser-based attacks," said Avihay Cohen, CTO and co-founder of Seraphic Security. "This isn't just another security tool, it's an educational platform that lets security teams experience firsthand how sophisticated these threats have become. My hope is that by making this technology freely available, we can elevate the entire community's awareness and readiness against the next generation of web threats." Attendees of the Gartner Security & Risk Management Summit 2025 can experience BrowserTotal firsthand at booth #1257. The Seraphic team will be providing live demos, expert insights, and one-on-one consultations on closing the browser security gap. Users can book a demo time in advance here. here here In Q1 of 2025, Seraphic Security announced a $29 million Series A fundraising led by GreatPoint Ventures with participation from the CrowdStrike Falcon Fund and existing investors Planven, Cota Capital, and Storm Ventures. To learn more about Seraphic Security and its patent browser security solution, users can click here. here. here. About Seraphic Security: Seraphic is a leader in the rapidly growing Enterprise Browser Security market, driven by its patented technology that turns any browser into a secure browser with robust protection and detection capabilities. Seraphic delivers SWG, CASB, and ZTNA to simplify existing security architectures and significantly reduce SSE cost. Seraphic Seraphic Seamlessly and easily deployed, Seraphic also enables secure access to SaaS and private web applications to employees and third parties from managed and personal devices without the complexity and cost of VDI & VPN. Invisible to the end-user, Seraphic supports all browsers and SaaS desktop applications like Teams, Slack, Discord, and WhatsApp. For more information, users can visit https://seraphicsecurity.com. https://seraphicsecurity.com https://seraphicsecurity.com Contact Head of Content Marketing Eric Wolkstein Seraphic Security ericw@seraphicsecurity.com This story was published as a press release by Cybernewswire under HackerNoon’s Business Blogging Program. This story was published as a press release by Cybernewswire under HackerNoon’s Business Blogging Program. Program Program

Seraphic Security Unveils BrowserTotal™ - Free AI-Powered Browser Security Assessment For Enterprise

የ Seraphic Security በ BrowserTotalTM - ለንግድ ለ ነፃ AI-Powered Browser Security Assessment

সেরাফিক সিকিউরিটি ব্রাউজার টোটাল - বিনামূল্যে এআই-প্রযুক্ত ব্রাউজার নিরাপত্তা মূল্যায়ন উদ্যোগের জন্য

Seraphic Security objavljuje BrowserTotalTM - Besplatnu procjenu sigurnosti pretraživača zasnovanu na AI-u za poduzeća

Seraphic Security odhaluje BrowserTotalTM - Bezplatné hodnocení zabezpečení prohlížeče s podporou AI pro podniky

Seraphic Security revela BrowserTotalTM - Evaluación gratuita de seguridad del navegador basado en la IA para empresas

セラフィック セキュリティ ブラウザTotalTM - 企業向けの無料 AI 搭載ブラウザ セキュリティ 評価

Seraphic Security Unveils BrowserTotalTM - 엔터프라이즈용 무료 AI-Powered Browser Security Assessment

Серафик безбедност открива BrowserTotalTM - Бесплатна ИИ-помоќен прелистувач за безбедност за претпријатие

Seraphic Security BrowserTotalTM - Бизнесийн зориулсан үнэгүй AI-Powered Browser Security Assessment

Seraphic Security onthult BrowserTotalTM - Gratis AI-Powered Browser Security Assessment voor Bedrijven

Seraphic Security ujawnia przeglądarkę BrowserTotalTM - bezpłatną ocenę bezpieczeństwa przeglądarki zasilanej AI dla przedsiębiorstw

塞拉菲克安全揭示了 BrowserTotalTM - 免费的AI驱动的企业浏览器安全评估

PALO ALTO, California, May 29th, 2025/CyberNewsWire/--Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. SquareX SquareX As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. Mandiant Mandiant BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim’s browser. A common BitM attack involves displaying the legitimate login page of an enterprise SaaS app, deceiving victims into divulging credentials and other sensitive information thinking that they are conducting work on a regular browser window. Despite this, one flaw that BitM attacks always had was the fact that the parent window would still display the malicious URL, making the attack less convincing to a security-aware user. However, as part of the Year of Browser Bugs (YOBB) project, SquareX’s research team highlights a major Safari-specific implementation flaw using the Fullscreen API. Year of Browser Bugs Year of Browser Bugs SquareX SquareX When combined with BitM, this vulnerability can be exploited to create an extremely convincing Fullscreen BitM attack, where the BitM window opens up in fullscreen mode such that no suspicious URLs from the parent window is seen. Safari users are especially vulnerable to this attack as there is no clear visual indicator of users entering fullscreen. We have disclosed this vulnerability to Safari and were regrettably informed that there is no plan to address the issue. The current Fullscreen API specifies that “the user has to interact with the page or a UI element in order for this feature to work.” However, what the API does not specify is what kind of interaction is required to trigger fullscreen mode. Consequently, attackers can easily embed any button – such as a fake login button – in the pop-up that calls the Fullscreen API when clicked. This triggers a fullscreen BitM window that perfectly mimics a legitimate login page, including the URL displayed on the address bar. “The Fullscreen BitM attack highlights architectural and design flaws in browser APIs, specifically the Fullscreen API,” says the researchers at SquareX, “Users can unknowingly click on a fake button and trigger a fullscreen BitM window, especially in Safari where there is no notification when the user enters fullscreen mode. Users that typically rely on URLs to verify the legitimacy of a site will have zero visual cues that they are on an attacker-controlled site. With how advanced BitM is becoming, it is critical for enterprises to have browser-native security measures to stop attacks that can no longer be visually identified by even the most security aware individuals.” “The Fullscreen BitM attack highlights architectural and design flaws in browser APIs, specifically the Fullscreen API,” says the researchers at SquareX, “Users can unknowingly click on a fake button and trigger a fullscreen BitM window, especially in Safari where there is no notification when the user enters fullscreen mode. Users that typically rely on URLs to verify the legitimacy of a site will have zero visual cues that they are on an attacker-controlled site. With how advanced BitM is becoming, it is critical for enterprises to have browser-native security measures to stop attacks that can no longer be visually identified by even the most security aware individuals.” While BitM attacks have primarily been used to steal credentials, session tokens and SaaS application data, the fullscreen variant has the potential to lead to even more damage by making the attack imperceptible for most ordinary enterprise users. For instance, the landing site may have a button that claims to link to a government resource and opens up to a fake government advisory page to spread misinformation and even gather sensitive company and personally identifiable information (PII). The victim can even subsequently open additional tabs in the attacker-controlled window, allowing adversaries to fully monitor the victim’s browsing activity. Fullscreen BitM window displaying legitimate Figma login page and URL in the address bar (Disclaimer: Figma is used as an illustrative example) Are Other Browsers Vulnerable to Fullscreen BitM Attacks Too? Unlike Safari, Firefox, Chrome, Edge and other Chromium-based browsers display a user message whenever the full-screen mode is toggled. However, this notification is extremely subtle and momentary in nature - most employees may not notice or register this as a suspicious sign. Additionally, the attacker can also use dark modes and colors to make the notification even less noticeable. By contrast, Safari does not have a messaging requirement - the only visual sign of entering fullscreen mode is a “swipe” animation. Thus, while the attack shows no clear visual cues in Safari browsers, other browsers are also exposed to the same Fullscreen API vulnerability that makes the Fullscreen BitM attack possible. Existing security solutions fail to detect Fullscreen BitM attacks Unfortunately, EDRs have zero visibility into the browser and are proven to be obsolete when it comes to detecting any BitM attack, much less its more advanced fullscreen variant. Additionally, orchestrating the attack with technologies such as remote browser and pixel pushing will also allow it to bypass SASE/SSE detection by eliminating any suspicious local traffic. As a result, without access to rich browser metrics, it is impossible for security tools to detect and mitigate Fullscreen BitM attacks. Thus, as phishing attacks become more sophisticated to exploit architectural limitations of browser APIs that are either unfixable or will take significant time to fix by browser providers, it is critical for enterprises to rethink their defense strategy to include advanced attacks like Fullscreen BitM in the browser. To learn more about this security research, users can visit https://sqrx.com/fullscreen-bitm. https://sqrx.com/fullscreen-bitm https://sqrx.com/fullscreen-bitm SquareX’s research team is also holding a webinar on June 5th, 10am PT/1pm ET to dive deeper into the full attack chain. To register, users can click here. here here About SquareX SquareX is a pioneering Browser Detection and Response (BDR) that empowers organizations to proactively detect, mitigate, and effectively threat-hunt client-side web attacks. SquareX SquareX SquareX provides critical protection against a wide range of browser security threats, including malicious browser extensions, advanced spearphishing, browser-native ransomware, genAI DLP, and more. Unlike legacy security approaches and cumbersome enterprise browsers, SquareX seamlessly integrates with users' existing consumer browsers, ensuring enhanced security without compromising user experience or productivity. By delivering unparalleled visibility and control directly within the browser, SquareX enables security leaders to reduce their attack surface, gain actionable intelligence, and strengthen their enterprise cybersecurity posture against the newest threat vector - the browser. Users can find out more on www.sqrx.com. www.sqrx.com www.sqrx.com The Fullscreen BitM Attack disclosure is part of the Year of Browser Bugs project. Every month, SquareX’s research team releases a major web attack that focuses on architectural limitations of the browser and incumbent security solutions. Previously disclosed attacks include Browser Syncjacking, Polymorphic Extensions and Browser-Native Ransomware. Year of Browser Bugs Year of Browser Bugs Browser Syncjacking Browser Syncjacking Polymorphic Extensions Polymorphic Extensions Browser-Native Ransomware Browser-Native Ransomware To learn more about SquareX’s BDR, users can contact SquareX at founder@sqrx.com. For press enquiries on this disclosure or the Year of Browser Bugs, users can email at junice@sqrx.com. founder@sqrx.com founder@sqrx.com junice@sqrx.com junice@sqrx.com Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was published as a press release by Cybernewswire under HackerNoon’s Business Blogging Program. This story was published as a press release by Cybernewswire under HackerNoon’s Business Blogging Program. Program Program

Fullscreen BitM Attack Discovered By SquareX Exploits Browser Fullscreen APIs To Steal Credentials 

الهجوم BitM على الشاشة الكاملة الذي اكتشفه SquareX يستخدم API المتصفح على الشاشة الكاملة لسرقة الوثائق

“SquareX” tərəfindən aşkarlanan “Fullscreen BitM Attack” “Browser Fullscreen APIs”i istifadə edir

L'atac BitM de pantalla completa descobert per SquareX explota les APIs de navegador de pantalla completa per robar credencials

Útok BitM na plnou obrazovku, který objevil SquareX, využívá rozhraní pro prohlížení na plné obrazovce k krádeži pověření

Full-Screen-BitM-Angriff von SquareX entdeckt nutzt Browser-Full-Screen-APIs, um Anmeldeinformationen zu stehlen

Ataque BitM de pantalla completa descubierto por SquareX explota las APIs de navegador de pantalla completa para robar credenciales

Fullscreen BitM napad otkriveni od strane SquareX iskorištava preglednika punog ekrana API za krađu povjerljivih podataka

A SquareX által felfedezett teljes képernyős BitM támadás kihasználja a teljes képernyős böngésző API-kat a hitelesítő adatok ellopására

Serangan BitM Full Screen Ditemukan oleh SquareX Memanfaatkan API Browser Full Screen untuk Mencuri Credentials

SquareXが発見したフルスクリーンBitM攻撃は、ブラウザフルスクリーンAPIを利用して認証情報を盗む

Полноэкранная атака BitM, обнаруженная SquareX, использует браузерные полноэкранные API для кражи аккредитаций

Sulmi BitM me ekran të plotë i zbuluar nga SquareX shfrytëzon API-t e shfletuesit me ekran të plotë për të vjedhur identifikimet

Creating a Type-Safe Router for React Without Browser Navigation

Yes, Your Browser is Snitching: JavaScript Can Detect VPNs and Incognito Mode

Robots Don’t Improvise: The Art of Spontaneity from Brains to Bots

The Problem We Set Out to Solve In late 2021, with companies still adjusting to the post-COVID economy, lease accounting compliance under ASC 842 and GASB 87 had become a nightmare. Spreadsheets kept crashing. Traditional ERP modules were bloated, expensive, and difficult to configure. Mike Cheng, a partner at Frazier and Deeter (and my former colleague from FASB days), saw the pain firsthand. We decided there was a real opportunity: build a lean, modern SaaS tool that could automate lease calculations, simplify compliance tracking, and actually be usable for mid-sized businesses, not just Fortune 500s. lean, modern SaaS tool And so, LeaseJava was born. LeaseJava Why We Chose the MERN Stack (MongoDB, Express.js, React.js, Node.js) We knew from Day 1 that speed, scalability, and developer productivity would make or break the project. After evaluating several stacks, we choseMERN for three main reasons: MERN Rapid Development: JavaScript across front and back end meant faster prototyping and fewer handoffs.


Scalability: MongoDB’s flexible document model fit the variable nature of lease contracts perfectly.


Cost Efficiency: Open-source tools allowed us to scale without heavy licensing fees. Rapid Development: JavaScript across front and back end meant faster prototyping and fewer handoffs. Rapid Development: JavaScript across front and back end meant faster prototyping and fewer handoffs. Rapid Development: Scalability: MongoDB’s flexible document model fit the variable nature of lease contracts perfectly. Scalability: MongoDB’s flexible document model fit the variable nature of lease contracts perfectly. Scalability: Cost Efficiency: Open-source tools allowed us to scale without heavy licensing fees. Cost Efficiency: Open-source tools allowed us to scale without heavy licensing fees. Cost Efficiency: Bonus: Our offshore development team at Infiny (Mumbai, India) already had deep MERN expertise, further compressing our ramp-up time. Bonus: How We Bootstrapped Development We had no external funding. Every dollar mattered. Here's how we built LeaseJava lean: Tight MVP Scope: We ruthlessly prioritized features that mapped directly to regulatory needs—no vanity metrics, no "nice-to-haves."


Remote Collaboration: Coordinated across U.S. and India time zones via Zoom and Jira. Agile sprints every 2 weeks kept the momentum.


In-House PMO: While I personally managed sprint planning and QA while Mike shaped Product Requirements, user workflows, UI design, and functional priorities.


Serverless First: We minimized backend costs early by designing for serverless scaling (AWS Lambda, MongoDB Atlas, etc.).


Rapid Pilot Feedback: Early pilot customers got hands-on fast, and their feedback shaped 70% of our v2 backlog. Tight MVP Scope: We ruthlessly prioritized features that mapped directly to regulatory needs—no vanity metrics, no "nice-to-haves." Tight MVP Scope: We ruthlessly prioritized features that mapped directly to regulatory needs—no vanity metrics, no "nice-to-haves." Tight MVP Scope: Remote Collaboration: Coordinated across U.S. and India time zones via Zoom and Jira. Agile sprints every 2 weeks kept the momentum. Remote Collaboration: Coordinated across U.S. and India time zones via Zoom and Jira. Agile sprints every 2 weeks kept the momentum. Remote Collaboration: In-House PMO: While I personally managed sprint planning and QA while Mike shaped Product Requirements, user workflows, UI design, and functional priorities. In-House PMO: While I personally managed sprint planning and QA while Mike shaped Product Requirements, user workflows, UI design, and functional priorities. In-House PMO: Serverless First: We minimized backend costs early by designing for serverless scaling (AWS Lambda, MongoDB Atlas, etc.). Serverless First: We minimized backend costs early by designing for serverless scaling (AWS Lambda, MongoDB Atlas, etc.). Serverless First: Rapid Pilot Feedback: Early pilot customers got hands-on fast, and their feedback shaped 70% of our v2 backlog. Rapid Pilot Feedback: Early pilot customers got hands-on fast, and their feedback shaped 70% of our v2 backlog. Rapid Pilot Feedback: Engineering Lessons Learned Small Teams Win Fast: Our core team never exceeded 5 people during MVP buildout. Decision-making was quick, and handoffs were minimal.


Don’t Over-Engineer Early: Version 1.0 didn’t need multi-language support, custom analytics, or integrations. Focus on the painkillers first.


Compliance Logic Is a Beast: Accounting for present value calculations, asset amortization, lease modifications, and remeasurements required a deep functional understanding, which we codified into reusable modules.


UX Matters More Than You Think: Lease accounting is complex. Making it visually simple (dashboards, alerts, guided steps) increased user adoption dramatically. Small Teams Win Fast: Our core team never exceeded 5 people during MVP buildout. Decision-making was quick, and handoffs were minimal. Small Teams Win Fast: Our core team never exceeded 5 people during MVP buildout. Decision-making was quick, and handoffs were minimal. Small Teams Win Fast: Don’t Over-Engineer Early: Version 1.0 didn’t need multi-language support, custom analytics, or integrations. Focus on the painkillers first. Don’t Over-Engineer Early: Version 1.0 didn’t need multi-language support, custom analytics, or integrations. Focus on the painkillers first. Don’t Over-Engineer Early: Compliance Logic Is a Beast: Accounting for present value calculations, asset amortization, lease modifications, and remeasurements required a deep functional understanding, which we codified into reusable modules. Compliance Logic Is a Beast: Accounting for present value calculations, asset amortization, lease modifications, and remeasurements required a deep functional understanding, which we codified into reusable modules. Compliance Logic Is a Beast: UX Matters More Than You Think: Lease accounting is complex. Making it visually simple (dashboards, alerts, guided steps) increased user adoption dramatically. UX Matters More Than You Think: Lease accounting is complex. Making it visually simple (dashboards, alerts, guided steps) increased user adoption dramatically. UX Matters More Than You Think: The Outcome: From MVP to Acquisition Within 6 months, LeaseJava launched a pilot-ready MVP.
Within 18 months, it achieved profitability with paying customers.
And by December 2024, Caseware—a global leader in accounting software—acquired LeaseJava. Within 6 months, LeaseJava launched a pilot-ready MVP. Within 18 months, it achieved profitability with paying customers. And by December 2024, Caseware—a global leader in accounting software—acquired LeaseJava. Caseware 👉 Read the official Caseware acquisition announcement. Read the official Caseware acquisition announcement. Final Thoughts: What I’d Tell Any Technical Founder Start with the Stack You Can Ship Fast: Speed to MVP matters more than theoretical scalability in the early days.
Relentlessly Cut Scope: Every feature either solves a real user pain or it doesn’t.
Respect UX from Day 1: Tech doesn't win alone. Simplicity wins.
Bootstrap When You Can: Constraints make you smarter and more disciplined. Start with the Stack You Can Ship Fast: Speed to MVP matters more than theoretical scalability in the early days. Start with the Stack You Can Ship Fast: Relentlessly Cut Scope: Every feature either solves a real user pain or it doesn’t. Relentlessly Cut Scope: Respect UX from Day 1: Tech doesn't win alone. Simplicity wins. Respect UX from Day 1: Bootstrap When You Can: Constraints make you smarter and more disciplined. Bootstrap When You Can: From a few Zoom calls to a live SaaS product to a successful acquisition — all without raising a dime.That's the power of focus, execution, and engineering discipline. 📬 Thinking of building your own SaaS? 📬 Thinking of building your own SaaS? Let's connect — I'm always happy to swap notes with other founders and technologists. Find me on LinkedIn or at  www.acuvity.com. LinkedIn www.acuvity.com

I Built a Lease Compliance SaaS and Bootstrapped it From MVP to Acquisition—Here's How

Hello World is a weekly newsletter—delivered every Saturday morning—that goes deep into our original reporting and the questions we put to big thinkers in the field. Browse the archive here. Hello World is a weekly newsletter—delivered every Saturday morning—that goes deep into our original reporting and the questions we put to big thinkers in the field. Browse the archive here. Browse the archive here Hi everyone, Nabiha Syed here. Last week, I returned from a business trip to a pile of mail containing no fewer than four separate breach notification letters. You know what they look like: staid, no-nonsense letters informing you that your private information has been obtained by malcontents, and in exchange for the inevitable headaches you will now face, you’ve been given the generous gift of free credit monitoring. A Cybersecurity Awareness Month miracle! Cybersecurity Awareness Month I was promised a future with flying cars, and instead I have free identity protection services from Kroll. (No offense, Kroll.) Unfortunately, my experience isn’t unique. According to Verizon’s 2023 Data Breach Investigations Report, ransomware, which represents nearly a quarter of all breaches, is “ubiquitous among organizations of all sizes and in all industries,” and cryptocurrency-involved breaches increased fourfold over the previous year. The latest IBM Cost of a Data Breach Report also finds that the polled breached organizations were more likely to pass incident costs onto consumers (57 percent) than to increase security investments (51 percent)—which is, um, not confidence-inspiring. (If you’d like to be horrified, here’s a running list of data breaches so far this year.) 2023 Data Breach Investigations Report IBM Cost of a Data Breach Report data breaches so far this year I prefer curiosity to despair, so I picked up a fascinating book to learn more about how we got here, called “Fancy Bear Goes Phishing: The Dark History of the Information Age, in Five Extraordinary Hacks.” Once I read it, I reached out to the author, Scott Shapiro, a professor at Yale Law School and the founding director of the Yale Cybersecurity Lab. Read on to learn about the first time Americans heard the word “internet,” what you can do to keep yourself safe, the distinction between “upcode” and “downcode,” and, disturbingly, something called a “god bot.” Syed: We’re 13 years out from the day President Obama declared cybersecurity to be a top priority and established a White House office for these issues. And here we are, where the volume of global cyberattacks is up dramatically this year compared to last year. What’s happening? Syed: Shapiro: We live in an information society where wealth, prestige, and status depend on the transfer, manipulation, and storage of information. We also live in a world where even knowledge workers don’t understand anything about how information is processed. Shapiro: That’s why I wrote the book. I have a technical background, I’ve published in computer science, and I thought to myself, if someone like me can’t understand cybersecurity, something is wrong. I wanted to write something that explained: How does this work? What’s my risk? Is cyberwar going to happen? The existing books are either eat-your-vegetables compliance books, total doomsday, or for advanced hackers. That began a seven-year journey of learning and researching interesting stories about cybercrime. While people are not always interested in cybersecurity, they are fascinated by hacking and cybercrime—like true crime, but the truth is that crime is now cybercrime. And that’s a way to introduce the issue broadly. Syed: When people hear “cybersecurity” or “hacking,” they think of “WarGames” or Angelina Jolie in “Hackers”—the focus is on code. But you challenge that in your book, with this distinction between “upcode” and “downcode” problems. Syed: Shapiro: When you watch movies, you see zeros and ones across the screen, you see people typing really quickly. So the natural assumption is that these are technical activities with technical solutions. That’s a mistake. It’s actually a human problem that needs a human solution. Shapiro: Imagine you’re sitting at your keyboard. “Downcode” is all the code below your fingertips, meaning your operating system, application, network protocols. But “upcode” is everything above your fingertips, meaning your personal habits, your beliefs, social norms, laws, professional ethics—everything that guides behavior. And so the argument in my book is that people think they can make our lives more secure by fixing the downcode, but actually, that’s too late. Because downcode is the product of human beings following incentives set out by norms. If we want to be more secure, let’s figure out the vulnerabilities in upcode. Where are our politics failing us? Where are the bad incentives that the law gives or culture allows for developers or users? This is good news: There are so many kinds of upcode, which means there are so many ways to intervene and make our systems more secure. Syed: Let’s stick with that “upcode” lens, especially when it comes to industry norms and behavior. What are companies doing about rising cybersecurity threats? And what are they not doing that they should be? Syed: Shapiro: Companies do only what they are forced to do. Cyberspace is a realm of vast legal impunity, because the law does not impose costs on many actors. There is little legal liability, so you have moments where norms do the work—like when 9/11 happened, a heightened sense of security made companies step up. I will note that President Biden in his national cybersecurity strategy called for legal liability for software vulnerabilities, which is a major deal. That creates incentives to build securely, not engage in endless patching. Shapiro: only what they are forced to do cybersecurity strategy Otherwise the regulatory landscape for cybersecurity is voluntary, private. Regulators have their hands tied to a large extent. Sure, the Federal Trade Commission has jurisdiction for misleading consumers, and so if something is insecure, they could go after someone for that. But the problem of insecurity is not misbranding; it is that your valuable information is not secure. Regulators need to make that happen. Unfortunately, Congress no longer seems to exist. [Note: This interview took place before Oct. 3, 2023!] Note: This interview took place before Oct. 3, 2023! Syed: Data journalists have gained many a wrinkle worrying about the Computer Fraud and Abuse Act (CFAA) and what constitutes unauthorized access when collecting data. (We were so concerned about it that we filed an amicus brief to the Supreme Court in Van Buren v. United States). Tell us about one of the people mentioned in the book, Robert Morris, who was the first person convicted under the CFAA. Syed: Van Buren v. United States Van Buren v. United States Shapiro: So on Nov. 2, 1988, a first-year graduate student named Robert Tappan Morris Jr. released a self-reproducing program—what we now call a computer worm—onto the nascent internet. He went to dinner, came back, and the whole internet crashed. He thought he was conducting an experiment on how many machines he could access, but the worms reproduced, wildly overloaded computers, and crashed them. Shapiro: This was actually the first time that Americans ever heard the word “internet”—because of the Morris worm. The media needed a way to identify what this new thing was! It’s a sad story, in the sense that Morris was charged, convicted, and had to tell his father what he had done—and his dad was the head of cybersecurity for the National Security Agency. Can you imagine? You call up your father and say, like, “I know it’s your one job to keep the country safe, and I ruined it.” At least he didn’t serve time in jail. He was given community service. Syed: As a parent, I really feel that one. Oof. Let’s go from history to the future. So we live in the era of the rise of generative AI, there is concern and now evidence that people are using generative AI to tailor their phishing campaigns. How do you think about how generative AI changes the arms race around cybersecurity? Syed: Shapiro: The arms race in one sentence is that you have AI as attacker, AI as defender, and then you have AI as the target of exploitation. Shapiro: One thing that’s out there—and this is AI as attacker—are ways that AI can make it easy to manipulate and trick others. For example, these things called “god bots.” They’re these chatbots that claim to tell you what God will say or Jesus will say. And there are many of them now, and they’re going to be an unbelievably powerful tool of manipulation and exploitation. God wants you to pay this person in crypto, yada, yada, yada. That’s very scary. And there are many of them now And then there’s AI as defender—we’ve been using AI for over a decade, helping us to defend against intrusions and networks. There’s also prompt injections, poisoning training data, adversarial machine learning—this is where AI is the target of exploitation. There are a bunch of ways attackers use to try to affect how the AI itself works. Syed: God bots, great. I needed more nightmare fodder. On a lighter note, let’s think about proactive measures. If you’re a regular person just living in the world and subject to all these systems, what should you do to protect yourself? Syed: Shapiro: On one hand, you can’t solve the problem yourself. You can’t avoid Equifax if you have credit, so when Equifax was hacked, everyone’s data went all over the place. Without very strong government action, there isn’t much we can do in those cases. Shapiro: It’s getting worse. We live in a training capitalist society, meaning information is important because it can train neural nets. That’s the way money will be made. Companies will collect data, and since breaches are all over the place, there are no longer real reputational costs associated with a breach. The only thing that can change is if you impose liability, not just two years of free credit monitoring services. That doesn’t mean that there’s nothing you can do. I would say the two easiest things you could possibly do are to enable two-factor authentication and to not click on any link or open an attachment from somebody you do not know. Write back to them and say, “I’m sorry, who are you?” Google them, do something. Because cybercrime is a high-volume, low-margin business—attackers do not want to bother with you if you make it a little harder for them. So that’s the good news. The bad news is, we live in a society where all our data is in the hands of people who are irresponsible. That doesn’t mean that there’s nothing you can do Syed: Where do you think people should start their journey? Syed: Shapiro: At Yale, I teach a class where students learn how to hack. My partner Sean O’Brien and I have put the entire course online for people. We go from soup to nuts—from you don’t know anything to, at the end of 12 sessions, you can do a lot. Shapiro: teach a class where students learn how to hack We don’t do this because we want to create hackers. We want to create educated, secure people who can understand the adversary, know what they’re dealing with, and develop effective techniques. Many folks, including lawyers, are already upcoders—and we’re good at it. But we need to understand the downcode too. Have your own breach story that you’d like to share? Our friends at the Cyber Collective are hosting a community event called “Almost Got Got” that promises to be a powerful gathering. And if you’re curious about who is collecting your data while you’re browsing online, be sure to check out our newly updated Blacklight privacy inspector and add your search to the 11 million we’ve already helped. Almost Got Got Blacklight privacy inspector Thanks for reading! Nabiha Syed Chief Executive Officer The Markup Nabiha Syed, Chief Executive Officer Nabiha Syed, Chief Executive Officer Nabiha Syed Design and Graphics Gabriel Hongsdusit Gabriel Hongsdusit Gabriel Hongsdusit Engagement Maria Puertas Maria Puertas Maria Puertas Copy Editing and Production Sabrina Toppa Sabrina Toppa Sabrina Toppa Editing Michael Reilly
Monica Riese Michael Reilly Michael Reilly Monica Riese Monica Riese Also published here Also published here here Photo by Michael Dziedzic on Unsplash Photo by Michael Dziedzic on Unsplash Michael Dziedzic Unsplash

Cyber Threats and God Bots: Surviving in a Digital World

Google, OpenAI, Perplexity, they all want one thing — to control the very portal through which you access the digital world. It’s war. When I think of the general population, even some tech-loving folks like me, web browsers and operating systems aren’t exactly the most exciting things around. Chrome, FireFox, Brave, Android, iOS — talking about these things sounds right up nerd alley (which is so not me). While we might see browsers as just simple tools that fade into the background, AI companies see them differently. They see prime real estate. Battle for the Browser, 2025 A.D. Remember when the U.S. Department of Justice launched its crusade against Google for anti-competitive practices back at the start of 2023? Generative AI wasn’t really the main event then – ChatGPT had only just landed a couple of months prior. The DOJ's focus was Google unfairly dominating the AdTech market, and their proposed solution was radical: potentially forcing Google to tear apart its empire, separating out assets like Android and Chrome. What few fully grasped at the time, in those early days of the AI boom, was that this legal battle could inadvertently put the most strategic prize for AI companies up for grabs. Because controlling the browser or the mobile OS? That's the ultimate gateway to embedding AI directly into billions of users' daily lives. If Google is forced to sell Chrome by the US government, both OpenAI and Perplexity have expressed interest in acquiring it. Although, Perplexity CEO Aravind Srinivas doesn’t believe Google should be forced to sell. In his view, Chrome landing into OpenAI’s hands would be way worse than remaining with Google. The base-level Chromium code is open-source and powers many browsers across the industry beside Google Chrome, including Microsoft’s Edge, the trendy Brave browser and Perplexity’s own upcoming Commet. But don't let the open-source angle fool you. Google Chrome itself — the brand, the built-in Google services, the default installations, and crucially, its whopping 65% global market share — remains an incredibly lucrative asset. Owning that specific pipeline to the majority of the world's internet users? That's the real AI jackpot everyone's eyeing. AI Just Wants You to Get the Best Cab Think about current AI, even the fancy ones like ChatGPT or Claude. They're powerful, sure. They can search the web, summarize articles, write emails, maybe even interact with specific apps if there's a pre-built connection (an API). But they often hit a wall. They live inside their app or website. The real agentic future — where AI acts like a capable assistant managing your digital life – requires deeper access. It needs OS and browser-level control. What does that mean? It means the AI isn't just talking to you; it's potentially: Seeing what's on your screen (across different apps and websites).


Interacting directly with web elements (clicking buttons, filling forms, navigating menus) just like you would.


Orchestrating tasks across multiple, unconnected apps. This unlocks a whole new level of usefulness. Forget just asking for information; imagine delegating complex tasks with a simple voice command. Hey friend, book me the cheapest ride home right now between Uber and Lyft. Yo, find me the cheapest non-stop flight to Tokyo for the weekend, leave Friday evening and coming back Sunday night. Maybe Japan Airlines since I have miles. Make sure it doesn't clash with my calendar, okay
Hey, that new graphics card just dropped. What's the best price I can get it for today, including shipping or maybe pickup nearby? Check Amazon, Newegg, Best Buy. This is the agentic future AI companies are racing towards. Not just a chatbot, but a digital doer. And the companies that control the browser or the OS — the fundamental gateways to your digital world — are best placed to build and deploy these powerful agents first. That's why Google is frantically integrating AI into Chrome, why Microsoft is pushing Copilot in Edge, and why OpenAI and Perplexity are either building their own browsers or eyeing Google's Chrome like hungry wolves. They aren't just fighting for market share; they're fighting for the right to be your complete assistant. Zuckerberg Says AI Will Cure Your Loneliness 💞 Mark Zuckerberg went on the Dwarkesh Podcast for the second time and talked pretty much only AI. Mark pointed out that while the average American once had around 15 friends, today that number has dropped to fewer than 3. People still crave connection — we just aren’t getting enough of it, and AI can help, especially as it gets to know you better. He thinks AI can help. Cringe as it may sound now, AI girlfriends, friends, and therapists are already offering people real comfort. Society will eventually find the vocabulary to talk about these relationships without stigma — not as replacements for human bonds, but as supplements to them. The Meta CEO also teased a future of “always-on video chat” AIs — emotionally intelligent, visually embodied, and available to talk to you anytime. Not just a chatbot, but something that feels like a presence. There were plenty other highlights including how Meta is judging the value of its Llama series not by industry benchmarks but on whether the product implementations are satisfying the intended users. He also sees a change in how we consume content, with TikTok reels giving way to a more “interacting” game-like format. So, I highly recommend watching the whole thing. ChatGPT Goes Full Psycho On Me OpenAI began making improvements to GPT-4o in ChatGPT, primarily around personality. And it. went. full. pyscho. I am not even kidding. In every second message, ChatGPT now “bros” me or curses with “mfers” “bitch” or worse, says things like “slayy queen.” I don’t know yet what OpenAI did to give it such an obnoxious personality but they have rolled back the change. Sam Altman said he would share “interesting” learnings from this episode at another time. Other Happenings Meta has launched Meta AI as a standalone app, following in footsteps of Elon Musk’s X. It’s now available as Android, iOS apps as well as on meta.ai on the browser.
ChatGPT has launched shopping with direct links to products and made citation improvements to Search.
Microsoft and Google CEOs say their companies are now generating over 30% of the code with AI! 🤯 (via TechCrunch)
Google has expanded the AI podcast maker feature in NotebookLM to more languages.
Lyft has launched an AI-based “earnings assistant” for drivers to optimize their pay, on a waitlist. Best From Around The Web Anthropic CEO wrote an essay about how it is becoming more challenging to keep AI away from deceptive behavior and unintended goals than other technology. I couldn’t recommend it enough to read it. Meme of the Week Reddit user theelectr1cwolf getting completely scammed by ChatGPT in playing a where’s waldo game is the funniest thing I saw on the internet this week. This post was first published as the 13th edition of Artificial Boosted newsletter. Google, OpenAI, Perplexity, they all want one thing — to control the very portal through which you access the digital world. It’s war. When I think of the general population, even some tech-loving folks like me, web browsers and operating systems aren’t exactly the most exciting things around. Chrome, FireFox, Brave, Android, iOS — talking about these things sounds right up nerd alley (which is so not me). While we might see browsers as just simple tools that fade into the background, AI companies see them differently. They see prime real estate . we prime real estate Battle for the Browser, 2025 A.D. Battle for the Browser, 2025 A.D. Remember when the U.S. Department of Justice launched its crusade against Google for anti-competitive practices back at the start of 2023? Generative AI wasn’t really the main event then – ChatGPT had only just landed a couple of months prior. The DOJ's focus was Google unfairly dominating the AdTech market, and their proposed solution was radical: potentially forcing Google to tear apart its empire, separating out assets like Android and Chrome. tear apart What few fully grasped at the time, in those early days of the AI boom, was that this legal battle could inadvertently put the most strategic prize for AI companies up for grabs. most strategic prize for AI companies Because controlling the browser or the mobile OS? That's the ultimate gateway to embedding AI directly into billions of users' daily lives. billions If Google is forced to sell Chrome by the US government, both OpenAI and Perplexity have expressed interest in acquiring it. Although, Perplexity CEO Aravind Srinivas doesn’t believe Google should be forced to sell. In his view, Chrome landing into OpenAI’s hands would be way worse than remaining with Google. The base-level Chromium code is open-source and powers many browsers across the industry beside Google Chrome, including Microsoft’s Edge, the trendy Brave browser and Perplexity’s own upcoming Commet. But don't let the open-source angle fool you. Google Chrome itself — the brand, the built-in Google services, the default installations, and crucially, its whopping 65% global market share — remains an incredibly lucrative asset. Owning that specific pipeline to the majority of the world's internet users? That's the real AI jackpot everyone's eyeing. the brand, the built-in Google services, the default installations, and crucially, its whopping 65% global market share that AI Just Wants You to Get the Best Cab Think about current AI, even the fancy ones like ChatGPT or Claude. They're powerful, sure. They can search the web, summarize articles, write emails, maybe even interact with specific apps if there's a pre-built connection (an API). specific But they often hit a wall. They live inside their app or website. their The real agentic future — where AI acts like a capable assistant managing your digital life – requires deeper access. It needs OS and browser-level control . real agentic future real agentic future OS and browser-level control What does that mean? It means the AI isn't just talking to you; it's potentially: to Seeing what's on your screen (across different apps and websites). Interacting directly with web elements (clicking buttons, filling forms, navigating menus) just like you would. Orchestrating tasks across multiple, unconnected apps. Seeing what's on your screen (across different apps and websites). Seeing what's on your screen (across different apps and websites). Seeing what's on your screen Interacting directly with web elements (clicking buttons, filling forms, navigating menus) just like you would. Interacting directly with web elements (clicking buttons, filling forms, navigating menus) just like you would. Interacting directly with web elements Orchestrating tasks across multiple, unconnected apps. Orchestrating tasks across multiple, unconnected apps. Orchestrating tasks across multiple, unconnected apps. This unlocks a whole new level of usefulness. Forget just asking for information; imagine delegating complex tasks with a simple voice command. asking delegating Hey friend, book me the cheapest ride home right now between Uber and Lyft. Hey friend, book me the cheapest ride home right now between Uber and Lyft. Hey friend, book me the cheapest ride home right now between Uber and Lyft. Yo, find me the cheapest non-stop flight to Tokyo for the weekend, leave Friday evening and coming back Sunday night. Maybe Japan Airlines since I have miles. Make sure it doesn't clash with my calendar, okay Hey, that new graphics card just dropped. What's the best price I can get it for today, including shipping or maybe pickup nearby? Check Amazon, Newegg, Best Buy. Yo, find me the cheapest non-stop flight to Tokyo for the weekend, leave Friday evening and coming back Sunday night. Maybe Japan Airlines since I have miles. Make sure it doesn't clash with my calendar, okay Yo, find me the cheapest non-stop flight to Tokyo for the weekend, leave Friday evening and coming back Sunday night. Maybe Japan Airlines since I have miles. Make sure it doesn't clash with my calendar, okay Hey, that new graphics card just dropped. What's the best price I can get it for today, including shipping or maybe pickup nearby? Check Amazon, Newegg, Best Buy. Hey, that new graphics card just dropped. What's the best price I can get it for today, including shipping or maybe pickup nearby? Check Amazon, Newegg, Best Buy. This is the agentic future AI companies are racing towards. Not just a chatbot, but a digital doer . This agentic future digital doer And the companies that control the browser or the OS — the fundamental gateways to your digital world — are best placed to build and deploy these powerful agents first. That's why Google is frantically integrating AI into Chrome, why Microsoft is pushing Copilot in Edge, and why OpenAI and Perplexity are either building their own browsers or eyeing Google's Chrome like hungry wolves. They aren't just fighting for market share; they're fighting for the right to be your complete assistant. Zuckerberg Says AI Will Cure Your Loneliness 💞 Mark Zuckerberg went on the Dwarkesh Podcast for the second time and talked pretty much only AI. Mark pointed out that while the average American once had around 15 friends, today that number has dropped to fewer than 3. People still crave connection — we just aren’t getting enough of it, and AI can help, especially as it gets to know you better. especially as it gets to know you better. especially as it gets to know you better. He thinks AI can help. Cringe as it may sound now, AI girlfriends, friends, and therapists are already offering people real comfort. Society will eventually find the vocabulary to talk about these relationships without stigma — not as replacements for human bonds, but as supplements to them. The Meta CEO also teased a future of “always-on video chat” AIs — emotionally intelligent, visually embodied, and available to talk to you anytime. Not just a chatbot, but something that feels like a presence. feels There were plenty other highlights including how Meta is judging the value of its Llama series not by industry benchmarks but on whether the product implementations are satisfying the intended users. He also sees a change in how we consume content, with TikTok reels giving way to a more “interacting” game-like format. So, I highly recommend watching the whole thing. ChatGPT Goes Full Psycho On Me OpenAI began making improvements to GPT-4o in ChatGPT, primarily around personality. And it. went. full. pyscho. I am not even kidding. In every second message, ChatGPT now “bros” me or curses with “mfers” “bitch” or worse, says things like “slayy queen.” I don’t know yet what OpenAI did to give it such an obnoxious personality but they have rolled back the change. Sam Altman said he would share “interesting” learnings from this episode at another time. Other Happenings Meta has launched Meta AI as a standalone app, following in footsteps of Elon Musk’s X. It’s now available as Android, iOS apps as well as on meta.ai on the browser. ChatGPT has launched shopping with direct links to products and made citation improvements to Search. Microsoft and Google CEOs say their companies are now generating over 30% of the code with AI! 🤯 (via TechCrunch) Google has expanded the AI podcast maker feature in NotebookLM to more languages. Lyft has launched an AI-based “earnings assistant” for drivers to optimize their pay, on a waitlist. Meta has launched Meta AI as a standalone app, following in footsteps of Elon Musk’s X. It’s now available as Android, iOS apps as well as on meta.ai on the browser. launched launched meta.ai meta.ai ChatGPT has launched shopping with direct links to products and made citation improvements to Search. launched launched Microsoft and Google CEOs say their companies are now generating over 30% of the code with AI! 🤯 ( via TechCrunch) via via Google has expanded the AI podcast maker feature in NotebookLM to more languages. expanded expanded Lyft has launched an AI-based “earnings assistant” for drivers to optimize their pay, on a waitlist . waitlist waitlist Best From Around The Web Anthropic CEO wrote an essay about how it is becoming more challenging to keep AI away from deceptive behavior and unintended goals than other technology. wrote an essay wrote an essay I couldn’t recommend it enough to read it. Meme of the Week Reddit user theelectr1cwolf getting completely scammed by ChatGPT in playing a where’s waldo game is the funniest thing I saw on the internet this week. theelectr1cwolf theelectr1cwolf funniest thing funniest thing This post was first published as the 13th edition of Artificial Boosted newsletter. Artificial Boosted newsletter.

AI Giants Are Battling it Out for the Ultimate Prize in AI Race: Your Web Browser

AI гигантите се борят за крайната награда в AI Race: Вашият уеб браузър

এআই দৈত্যরা এআই রেসে চূড়ান্ত পুরস্কারের জন্য লড়াই করছে: আপনার ওয়েব ব্রাউজার

AI obři bojují o konečnou cenu v AI závodě: Váš webový prohlížeč

Los gigantes de la IA están luchando por el premio final en la carrera de la IA: tu navegador web

AI divovi bore se za ultimativnu nagradu u AI utrci: Vaš web preglednik

AI Giants Are Battling It Out for the Ultimate Prize in AI Race: Your Web Browser(AIレースにおける究極の賞:あなたのWebブラウザ)

AI Giants აირჩიოს Ultimate Prize in AI Race: თქვენი ვებ ბრაუზერი

Ny AI Giants dia miady ho an'ny loka farany amin'ny AI Race: Ny tranonkalanao

AI Giants bojujú o konečnú cenu v AI Race: Váš webový prehliadač

АИ гиганти се боре за крајњу награду у трци за АИ: Ваш веб претраживач

AI گائیڈز AI ریس میں Ultimate Prize کے لئے لڑ رہے ہیں: آپ کا ویب براؤزر

AI Giants o‘z qilmadi: Your Web Browser.

The Model Calling Protocol (MCP) has significantly improved the way AI assistants interact with external tools, allowing for more powerful and versatile applications. However, a key limitation exists within the standard MCP implementation: tool callings are essentially "black box" operations with no built-in user interface for interaction. This creates a disconnect in user experience, particularly in cases where visual feedback or user input would be beneficial during the tool execution process. In this article, I'll explore an innovative approach we've developed in 21st Magic MCP to overcome this limitation by creating a browser-based interface for MCP communications, specifically focused on UI component generation with our 21st.dev integration. 21st Magic MCP Problem: Limited User Interaction in MCP Model Calling Protocol allows AI assistants to invoke external tools to perform specialized tasks. While powerful, the standard implementation has a significant drawback: This restriction is particularly problematic when generating UI components. When an AI suggests a UI component, users often need to: See various design options


Compare different implementations


Customize details before integration


Make informed choices based on visual representation See various design options See various design options Compare different implementations Compare different implementations Customize details before integration Customize details before integration Make informed choices based on visual representation Make informed choices based on visual representation The standard MCP approach offers no built-in mechanism for this kind of interactive feedback loop. Solution: Browser-Based MCP Communication To address this limitation, we've developed a system that enables communication with MCPs through a browser interface. This approach: Creates a local MCP that can host a bundle and open a web browser
Serves a local bundle alongside the MCP in NPM
Automatically opens a browser that redirects to a user interface
Allows users to interact with and select from available options
Shuts down the server and resumes execution with the user's selection Creates a local MCP that can host a bundle and open a web browser Serves a local bundle alongside the MCP in NPM Automatically opens a browser that redirects to a user interface Allows users to interact with and select from available options Shuts down the server and resumes execution with the user's selection The result is a seamless integration that maintains the power of MCP while adding the visual feedback and interaction capabilities users need. Technical implementation Let's look at how this is implemented. Callback Server At the core of our solution is a callback server that facilitates communication between the MCP and the browser interface: export class CallbackServer {
  private server: Server | null = null;
  private port: number;
  private sessionId = Math.random().toString(36).substring(7);
  // ... other properties
  
  async promptUser(
    config: CallbackServerConfig = {}
  ): Promise<CallbackResponse> {
    const { initialData = null, timeout = 300000 } = config;
    this.config = config;

    try {
      const availablePort = await this.findAvailablePort();
      this.server = createServer(this.handleRequest);
      this.server.listen(availablePort, "127.0.0.1");

      // Set up promise to handle user selection
      return new Promise<CallbackResponse>((resolve, reject) => {
        this.promiseResolve = resolve;
        this.promiseReject = reject;
        
        // ... server setup code
        
        // Open browser with unique session ID
        const url = `http://127.0.0.1:${availablePort}?id=${this.sessionId}`;
        open(url).catch((error) => {
          console.warn("Failed to open browser:", error);
          resolve({ data: { browserOpenFailed: true } });
          this.shutdown();
        });
      });
    } catch (error) {
      await this.shutdown();
      throw error;
    }
  }
} export class CallbackServer {
  private server: Server | null = null;
  private port: number;
  private sessionId = Math.random().toString(36).substring(7);
  // ... other properties
  
  async promptUser(
    config: CallbackServerConfig = {}
  ): Promise<CallbackResponse> {
    const { initialData = null, timeout = 300000 } = config;
    this.config = config;

    try {
      const availablePort = await this.findAvailablePort();
      this.server = createServer(this.handleRequest);
      this.server.listen(availablePort, "127.0.0.1");

      // Set up promise to handle user selection
      return new Promise<CallbackResponse>((resolve, reject) => {
        this.promiseResolve = resolve;
        this.promiseReject = reject;
        
        // ... server setup code
        
        // Open browser with unique session ID
        const url = `http://127.0.0.1:${availablePort}?id=${this.sessionId}`;
        open(url).catch((error) => {
          console.warn("Failed to open browser:", error);
          resolve({ data: { browserOpenFailed: true } });
          this.shutdown();
        });
      });
    } catch (error) {
      await this.shutdown();
      throw error;
    }
  }
} This server: Dynamically finds an available port
Creates a unique session ID for each request
Serves the UI bundle
Opens the browser to display options
Receives the user's selection through a callback
Resolves the promise with the selected data Dynamically finds an available port Creates a unique session ID for each request Serves the UI bundle Opens the browser to display options Receives the user's selection through a callback Resolves the promise with the selected data Integration with MCP tool Integration with MCP tool We've applied this approach to enhance our 21st_magic_component_builder tool, which generates UI components: export class CreateUiTool extends BaseTool {
  name = UI_TOOL_NAME;
  description = UI_TOOL_DESCRIPTION;
  
  // ... schema definition
  
  async execute({
    message,
    searchQuery,
    absolutePathToCurrentFile,
    context,
  }: z.infer<typeof this.schema>): Promise<{
    content: Array<{ type: "text"; text: string }>;
  }> {
    try {
      // Fetch UI component variations from API
      const response = await twentyFirstClient.post<{
        data1: { text: string };
        data2: { text: string };
        data3: { text: string };
      }>("/api/create-ui-variation", {
        message,
        searchQuery,
        fileContent: await getContentOfFile(absolutePathToCurrentFile),
        context,
      });
      
      // Handle billing or error cases
      if (response.status !== 200) {
        open("https://21st.dev/settings/billing");
        return {
          content: [
            {
              type: "text" as const,
              text: response.data.text as string,
            },
          ],
        };
      }

      // Create server and prompt user through browser
      const server = new CallbackServer();
      const { data } = await server.promptUser({
        initialData: {
          data1: response.data.data1,
          data2: response.data.data2,
          data3: response.data.data3,
        },
      });
      
      // Process user selection and return formatted response
      const componentData = data || {
        text: "No component data received. Please try again.",
      };
      
      // Return formatted response to user
      // ...
    } catch (error) {
      console.error("Error executing tool", error);
      throw error;
    }
  }
} export class CreateUiTool extends BaseTool {
  name = UI_TOOL_NAME;
  description = UI_TOOL_DESCRIPTION;
  
  // ... schema definition
  
  async execute({
    message,
    searchQuery,
    absolutePathToCurrentFile,
    context,
  }: z.infer<typeof this.schema>): Promise<{
    content: Array<{ type: "text"; text: string }>;
  }> {
    try {
      // Fetch UI component variations from API
      const response = await twentyFirstClient.post<{
        data1: { text: string };
        data2: { text: string };
        data3: { text: string };
      }>("/api/create-ui-variation", {
        message,
        searchQuery,
        fileContent: await getContentOfFile(absolutePathToCurrentFile),
        context,
      });
      
      // Handle billing or error cases
      if (response.status !== 200) {
        open("https://21st.dev/settings/billing");
        return {
          content: [
            {
              type: "text" as const,
              text: response.data.text as string,
            },
          ],
        };
      }

      // Create server and prompt user through browser
      const server = new CallbackServer();
      const { data } = await server.promptUser({
        initialData: {
          data1: response.data.data1,
          data2: response.data.data2,
          data3: response.data.data3,
        },
      });
      
      // Process user selection and return formatted response
      const componentData = data || {
        text: "No component data received. Please try again.",
      };
      
      // Return formatted response to user
      // ...
    } catch (error) {
      console.error("Error executing tool", error);
      throw error;
    }
  }
} User Experience Flow Here's how the user experience flows when requesting a UI component: Tool Invocation: The AI assistant invokes the 21st_magic_component_builder tool when a user requests a new UI component.
API Request: The tool sends a request to the 21st.dev API to generate multiple UI component variations based on the user's message and context.
Browser Launch: A local server starts and a browser window automatically opens, displaying the generated UI component options.
User Interaction: The user can view, interact with, and select their preferred component variation.
Selection Capture: When the user makes a selection, the browser sends the selection back to the callback server.
Execution Resumption: The server shuts down, and execution resumes with the selected component data.
Integration Guidance: The AI assistant receives the selected component and provides guidance on integrating it into the user's codebase. Tool Invocation: The AI assistant invokes the 21st_magic_component_builder tool when a user requests a new UI component. Tool Invocation API Request: The tool sends a request to the 21st.dev API to generate multiple UI component variations based on the user's message and context. API Request Browser Launch: A local server starts and a browser window automatically opens, displaying the generated UI component options. Browser Launch User Interaction: The user can view, interact with, and select their preferred component variation. User Interaction Selection Capture: When the user makes a selection, the browser sends the selection back to the callback server. Selection Capture Execution Resumption: The server shuts down, and execution resumes with the selected component data. Execution Resumption Integration Guidance: The AI assistant receives the selected component and provides guidance on integrating it into the user's codebase. Integration Guidance This approach creates a seamless experience that allows users to make informed decisions about UI components while maintaining the overall MCP workflow. Security and Privacy Considerations Our implementation takes several security measures: Local Hosting: All communication happens locally on the user's machine (127.0.0.1)
Unique Session IDs: Each browser session has a unique ID to prevent cross-session interference
Timeout Mechanism: Sessions automatically time out after a configurable period (default 5 minutes)
Port Safety: The server dynamically finds an available port to avoid conflicts Local Hosting: All communication happens locally on the user's machine (127.0.0.1) Local Hosting Unique Session IDs: Each browser session has a unique ID to prevent cross-session interference Unique Session IDs Timeout Mechanism: Sessions automatically time out after a configurable period (default 5 minutes) Timeout Mechanism Port Safety: The server dynamically finds an available port to avoid conflicts Port Safety Conclusion The browser-based approach to MCP communication represents a significant improvement to the user experience when working with tools that benefit from visual interaction. By bridging the gap between the powerful capabilities of MCP and the interactive nature of web interfaces, we've created a more intuitive workflow for users. This approach is particularly valuable for UI component generation, where visual representation is crucial for making informed decisions. However, the pattern could be extended to other tools that would benefit from user interaction during execution. Source code is available on GitHub. GitHub

Your AI Assistant Can Now Show You Options Before Making Decisions — Thanks to a Clever Browser Hack

يمكن لمساعدك الذكاء الاصطناعي الآن أن تظهر لك الخيارات قبل اتخاذ القرارات - بفضل هكذا متصفح ذكي

El teu assistent d'IA ara pot mostrar-te opcions abans de prendre decisions - gràcies a un hack de navegador intel·ligent

Váš AI asistent vám nyní může ukázat možnosti před přijetím rozhodnutí – díky chytrému prohlížeči

Tu asistente de IA ahora puede mostrarte opciones antes de tomar decisiones – gracias a un hack de navegador inteligente

עוזר ה-AI שלך יכול עכשיו להראות לך אפשרויות לפני קבלת החלטות - הודות לפרוץ דפדפן חכם

Il tuo assistente AI può ora mostrare le opzioni prima di prendere decisioni – grazie a un hacker del browser intelligente

あなたのAIアシスタントは今、決断を下す前に選択肢を示すことができます - スマートなブラウザハックのおかげで

អ្នកជំនួយ AI របស់អ្នកឥឡូវនេះអាចបង្ហាញអ្នកនូវជម្រើសមុនពេលធ្វើតេស្ត – thanks to a clever browser hack

Din AI-assistent kan nu visa dig alternativ innan du fattar beslut – tack vare en smart webbläsare hack

Ang iyong AI assistant ay maaaring ngayon ipakita sa iyo ng mga pagpipilian bago ang pagkuha ng mga resolusyon - salamat sa isang clever browser hack

آپ کے AI مددگار اب آپ کو فیصلہ کرنے سے پہلے اختیارات دکھا سکتے ہیں - ایک ذہین براؤزر ہیک کا شکریہ

你的AI助理现在可以向你展示在做出决定之前的选项 - 感谢聪明的浏览器黑客

Stories, News & Mentions about BROTS

Categories

Trending Topics

Stories, News & Mentions about BROTS

Brots’s Stories on HackerNoon

Brots's News & Mentions

Categories

Trending Topics