The day after the zero-days
Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant.
Tag: Guest Post
AI, IPv6, and the future Internet at IETF 126
Guest Post: At IETF 126, discussions highlighted how AI is beginning to shape the future of Internet infrastructure. Participants identified IPv6 as a critical foundation for large-scale AI ecosystems and explored new approaches.
MikroTik as a home router
Guest Post: No homelab can be complete without a proper networking setup. Proceed at your own risk! (… it’s worth it)
Asia Pacific privacy laws are arriving. Your NREN holds more personal data than you think.
Guest Post: Privacy compliance starts with knowing your data. Many NREN services, including federated identity, eduroam, CSIRT operations, and network telemetry, process personal data and may already fall under emerging privacy laws.
Time: The cornerstone of digital sovereignty and independence
Guest Post: Though often overlooked, time underpins telecommunications, finance, energy, cloud, AI, and transport systems. As dependence on GNSS increases, organizations need resilient, traceable time sources to strengthen cybersecurity, improve operational continuity, and support digital sovereignty.
Chamelio: A chameleonic network stack that adapts to every tenant
Guest Post: Chamelio is a provider-managed network stack for cloud VMs that runs in userspace on the host and allows tenants to upload custom transport protocols to a shared datapath.
Finding zero-days with any model
Guest Post: Vulnerability discovery is an orchestration problem, not a frontier-model problem.
Understanding partial reachability in the Internet core
Guest Post: Persistent partial reachability is not noise — it is a fundamental, measurable part of how the Internet behaves today. A small number of long-lived peninsulas cause most of the impact, and recognizing them can dramatically improve both operational clarity and measurement accuracy.
Secure by default: How ‘HSTS-Enforced’ could finally close the web’s oldest backdoor
Guest Post: The current web still relies on a legacy assumption that website should be accessible over unencrypted HTTP unless it explicitly signals otherwise. HSTS-Enforced builds on top of HSTS by inverting its security model.
IPv6 address planning: From ‘bit conservation’ to ‘elegant alignment’
Guest Post: When planning IPv6 addressing schemes, many engineers still carry over habits from the IPv4 era. The instinct is to conserve every possible bit and to compress region, service, and network type information into the smallest space that meets current needs. While this approach once made sense, it is poorly suited to IPv6.