Finding zero-days with any model
Guest Post: Vulnerability discovery is an orchestration problem, not a frontier-model problem.
Tag: Guest Post
Understanding partial reachability in the Internet core
Guest Post: Persistent partial reachability is not noise — it is a fundamental, measurable part of how the Internet behaves today. A small number of long-lived peninsulas cause most of the impact, and recognizing them can dramatically improve both operational clarity and measurement accuracy.
Secure by default: How ‘HSTS-Enforced’ could finally close the web’s oldest backdoor
Guest Post: The current web still relies on a legacy assumption that website should be accessible over unencrypted HTTP unless it explicitly signals otherwise. HSTS-Enforced builds on top of HSTS by inverting its security model.
IPv6 address planning: From ‘bit conservation’ to ‘elegant alignment’
Guest Post: When planning IPv6 addressing schemes, many engineers still carry over habits from the IPv4 era. The instinct is to conserve every possible bit and to compress region, service, and network type information into the smallest space that meets current needs. While this approach once made sense, it is poorly suited to IPv6.
Rethinking non‑access stratum timers for LEO satellite constellations in 5G and beyond
Guest Post: AstroTimer starts from a simple but important question: Can we compute NAS timers directly from LEO‑specific conditions, such as path length, link variability, and NF load, using a closed‑form, low‑cost model?
APNIC Foundation’s BCAP project wins 2026 WSIS Prize for Capacity Building
The APNIC Foundation’s Building Capabilities in the Asia Pacific (BCAP) project has won the 2026 WSIS Prize for capacity building, recognizing its impact on developing Internet skills across the Asia Pacific.
Who’s running all those tiny RPKI servers?
Guest Post: Small RPKI publication servers comprise a quiet but important part of the Internet’s trust infrastructure. Understanding who operates these servers, and why, helps reveal both strengths and gaps in today’s routing security.
ROA adoption barriers to practical planning tools: Reflections from ARIN 57
Guest Post: Even operators with strong BGP knowledge tend to create ROAs infrequently and may lack deep familiarity with their behaviour. ROOTBEER helps operators understand what to consider when creating ROAs.
IPv6-only vs IPv6-mostly: Appropriate use cases
Guest Post: Clear definitions of IPv6-only and IPv6-mostly depend on context. Choosing the right transition model directly affects performance, scalability, and user experience. Understanding where each approach fits is key to successful IPv6 deployment.
SSH key exchange failures when managing legacy network devices
Guest Post: How to restore access to legacy network devices when modern SSH clients reject outdated cryptography.