Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
CASE FILE
The Root That Wasn't Sold: What Symantec's Exit Revealed About Transferable Trust
Symantec could sell its certificate-authority business, but it could not sell a command to keep trusting the old roots. That decision remained inside independently operated clients.
IETF
Bruno Decraene and the Discipline of Draining Before Shutdown
A planned BGP maintenance window is not a surprise failure. Yet an operator who closes the session first can make it behave like one: the old routes vanish, the network begins searching, and packets arrive while the replacement path is still becoming usable. The more disciplined…
Global Regional ISP Trends
The Five Percent That Prices the Network
A 95th-percentile bandwidth bill looks like a statistic. In practice it is a contract: a rule for deciding which traffic peaks the buyer absorbs, which the provider ignores, how much capacity remains physically available, and whether the buyer can reproduce the number on the…
CASE FILE
The Route That Borrowed a Name: What the MyEtherWallet Hijack Revealed About Layered Authority
A route accepted elsewhere let false DNS answers arrive locally, but the 2018 MyEtherWallet attack still had to cross a chain of independent technical vetoes.
Story
ARIN's IPv6 Waiver Expiry Notice Leaves the Transition Count Unstated
At midnight on 1 January, a `/36` will not gain a single address. Its holder may nevertheless cross a billing boundary. ARIN has announced the end of a five-year IPv6 incentive and promised direct contact; the missing public number is how many organisations must make that…
Story
The Signed Outage: What Orange España Revealed About RPKI Write Authority
Orange España showed how a hostile but valid ROA can pass through validators and local policy, turning account access into staggered route loss.
Story
APNIC's Impact Assessments Leave the Both-Pass Outcome Undefined
The word `nibble` will appear twice on APNIC 62's policy agenda. One proposal would move the minimum IPv6 allocation from `/32` to `/40`. The other would leave `/32` untouched and align a larger, already-validated request. A shared hexadecimal convenience hides two different…
Global Institutional
containerd: the runtime daemon most container users never see
Kubernetes, Docker and managed cloud platforms make containers look like applications, pods and services. Beneath those interfaces, containerd moves images, prepares filesystems, preserves runtime state and supervises processes. Its value comes from being deliberately incomplete…
Story
AFRINIC's First Article 24 Text Now Needs Its Own Review
The deadline passed at 23:59 UTC. In the 53-page constitutional draft still linked the next day, Article 24 had a heading, a number and a promise to add the law and dispute route later—but no clause for entities to review.
Global Institutional
DMTF: The Standards That Control Servers Below the Operating System
A server can be powered off, inspected, updated or reconfigured even when its operating system is unavailable. DMTF defines much of the language used for that privileged management plane, from Redfish APIs and MCTP transport to PLDM commands, SPDM identity and SMBIOS inventory.…
Global Institutional
DMTF and the Language of Server Management
A server can be powered off, inspected, updated or reconfigured even when its operating system is down. DMTF defines much of the language of that privileged management plane: from the Redfish API and MCTP transport to PLDM commands, SPDM identity and SMBIOS inventory. Common…
History
The Sum That Had Two Zeros: How the Internet Checksum Bounded Error, Not Trust
The Internet checksum made damaged packets easier to reject by making a deliberately small claim. Its strangest corner case—two representations of zero—shows why even cheap evidence must preserve an exact boundary.
Story
One Document Store Put Five RIPE NCC Workflows on Hold
A resource transfer can wait because a policy question is unresolved, because evidence is incomplete, or because the filing cabinet is being upgraded. On 22 August, RIPE NCC members encountered the third case. The distinction matters: a planned administrative pause is not a…
History
The Report the Sender Could Not Trust: Why TCP SACK Remained Advice
A TCP sender may keep a byte range in memory even after the receiver has explicitly reported it. That apparent distrust is the safeguard at the centre of selective acknowledgment: a precise observation can guide recovery without becoming a final receipt or a command.
Global Cloud Services Trends
Cloud Portability Has a Postcode
Cloud computing was sold as locationless infrastructure, but the economics of leaving it are becoming conspicuously geographic. Within the same hyperscaler, the rights and price attached to moving data can now turn on account country, billing address, source region, network path…
Story
LACNIC's Legacy Deadline Is Running Ahead of Its Policy
Prior BTW reporting describes legacy IPv4 holders answering an administrative request while the community rule that would govern the same evidence is still being debated. That sequence does not make the outreach illegitimate. It makes the label on every decision unusually…
History
The Acknowledgment That Learned to Point: How TCP SACK Made Loss Visible
TCP's original acknowledgment could certify an unbroken prefix of a byte stream, but it could not describe the islands waiting beyond the first gap. Selective acknowledgment added a small map of those islands while leaving the sender—not the receiver—in charge of repair.
History
The Router That Pointed Sideways: How ICMP Redirect Stayed Local
ICMP Redirect let a gateway reveal a better local next hop without becoming a routing authority. Its power ended at the host that had just used it.
History
The Number That Became Newer After Zero: How DNS Ordered Versions Without a Clock
At the edge of a 32-bit counter, DNS asks operators to accept an apparent impossibility: zero may be newer than 4,294,967,295. That rule let independent name servers agree on version order without sharing a clock, but only inside a deliberately bounded window.
Story
The Evidence ARIN Should Require Before Retiring Legacy Whois
ARIN's new directory-services consultation looks like a consolidation project. Its migration inventory tells the more important story: an API can announce its own retirement, a local reassignment server needs a conversion tool, and Port 43 can hide inside scripts that the…