Tag
TechCrunch discusses how critical PHP vulnerabilities exposed the fragility of the internet's open-source foundation and whether widespread AI and LLM agents will make discovering and exploiting such flaws far easier in the future.
紧急修复的两个关键 PHP 漏洞影响自 2004 年以来的所有版本，可能导致大规模远程控制攻击，促使全球政府和企业网站紧急下线并抢在攻击前打补丁。
A critical PHP vulnerability with a 9.2 severity score threatens to allow full server compromise, with fears that attackers will use AI to reverse-engineer the patch within 15 minutes of its release, alongside a publicly leaked exploit.
随着 OpenAI Dots 和 Meta Muse 等个人 AI 智能体大规模普及，网站纷纷封禁这些代理，业界担忧为智能体优化互联网可能损害普通用户的体验。
本播客采访了 DNS 之父 Paul Mockapetris，讲述了 DNS 诞生前的主机表时代、URL 反转命名与 www 前缀的设计缘由、DNS 的树状解析机制及其迁移互联网的过程。
A consumer class action against Verisign, the operator of the .com domain name registry, concerning domain name registration practices. The article appears to be a legal notice or filing related to the lawsuit.
Cloudflare CEO Matthew Prince popped up in a Stack Exchange post from ten years ago, responding to users' doubts about the sustainability of the free plan with just "As long as I'm CEO," reaffirming that the free service will remain for the long haul.
A lighthearted observation about how country-code top-level domains like .co, .io, .ai, and .rs get repurposed by the tech industry, boosting those countries' domain economies.
RPKI-validated routes rose from 54% to over 70% of global internet routes in a year, driven largely by China's jump to 83% IPv4 coverage. Analysis shows invalid routes now barely propagate, reaching only about two BGP vantage points on average, confirming RPKI effectively blocks hijacks and misorigination.
A Hacker News discussion reminding users that third-level .name domains will be permanently removed next year, asking how people are migrating and sharing frustrations with Azure admin account limitations.
APNIC blog post examining the October 2026 DNS root KSK key roll, explaining the RFC 5011 trust anchor update process and using RFC 8145/9567 measurements to assess resolver adoption of the new KSK-2024 key.
作者探讨随着AI代理在互联网上变得更自主，传统的CAPTCHA式反机器人验证是否需要被一种新的标准验证层取代，用来确认AI代理的身份、所有权与授权权限，并向开发者征求对OAuth、DIDs和可验证凭证等方案的看法。
ISP Column 的更新文章讨论 DNS 根密钥（KSK-2024）将于 2026 年 10 月 11 日轮换，并通过 RFC 8145 与 KSK Sentinel 信号评估各 ISP 网络是否已将新密钥加入其递归解析器的信任锚点集，附有尚未就绪的易受影响 ISP 网络清单。
Cloudflare is preparing to become a Certificate Authority itself after acquiring a GlobalSign root certificate, motivated by the systemic risk of relying on Let's Encrypt's concentration in the free TLS certificate market. The move raises questions about whether it will decentralize Web PKI or create an even larger central point.
IANA's VP Kim Davies explained to Oliver Dunk that recent changes to example.com were driven by bandwidth optimization — moving extra content into a separate JavaScript file that most automated traffic doesn't fetch — and reaffirmed the domain's role as a documentation placeholder rather than a general-purpose endpoint.
Stability AI founder Emad Mostaque warned at TechBBQ in Copenhagen that AI-driven cyberattacks could take the internet offline within years, citing the Hugging Face breach, autonomous OpenAI hacking agents, and hidden geopolitical biases in frontier models.
This article explores how the global internet depends on physical submarine fiber-optic cables for international data transmission, highlighting their construction, ownership, and landing points on coastlines.
A BGP hijacking attack exploited lax security configurations to infect networks with malware via fake software updates, highlighting preventable errors in routing security.
Introduces the Agent Network Protocol (ANP), an open-source communication protocol aiming to become the HTTP of the Agentic Web era by enabling agent identity, discovery, messaging, and collaboration. The post also reflects on how the web became siloed due to human-centric efficiency, arguing for a protocol-centric agent internet.
The APNIC Blog investigates the operators of small RPKI publication servers, analyzing their characteristics and role in the global RPKI infrastructure.