Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
Story
AS0 ROAs: Conservation Tool or Pre-Emptive Denial?
An AS0 ROA says that a prefix and its more-specifics should not be used for public routing. Applied to genuinely unallocated space, it can turn a registry's conservation duty into a machine-readable warning against misoriginations. Applied to a wrongly classified or newly…
Story
RPKI-to-Router Deployment and the Missing Governance Layer
RPKI can tell a router that a route origin is Valid, Invalid or NotFound, but it does not command the router to carry or reject the route. Between a registry's signed statement and a packet's path sits a succession of validators, caches, router implementations, peering contracts…
Story
The Source Attribute That Became a Trust Label
In RPSL, `source:` was meant to identify the routing registry in which an entity was registered. Operators gradually made it do more. A short name such as ARIN, APNIC, RIPE or RADB now helps determine which declarations enter filters and which are ignored. That practical…
Story
IRR Route Objects After the Network Has Moved
A network can change transit provider, origin AS, corporate owner or regional registry while an old Internet Routing Registry route object remains where it was first lodged. That residue matters whenever an operator still turns registry declarations into prefix filters. Migration…
Story
The Parent Zone and the Power to Refuse a Child
A reverse-DNS operator can serve a technically perfect child zone and still remain invisible if the parent will not publish its delegation. In the hierarchy beneath `in-addr.arpa` and `ip6.arpa`, refusal can occur at more than one boundary, for more than one reason, under more…
Story
Reverse DNS as a Quiet Sanction
An address block can remain routed, its servers can keep answering and its forward names can still resolve, yet a small deletion higher in the reverse-DNS tree can make its mail look untrustworthy and its network harder to operate. That is why reverse delegation should not be…
Global Cloud Services
Atlassian made cloud-site restoration a tenant-continuity accountability test
Atlassian Cloud's 2022 outage belongs in a risk and accountability file because a collaboration tenant is not a replaceable login screen. It is the working memory of projects, tickets, pages, roadmaps, attachments, approvals, service queues, and audit context. When a subset of…
Global Cloud Services
Google Cloud made UniSuper deletion recovery a cloud-control accountability test
Google Cloud is a risk and accountability case because the UniSuper service disruption showed that cloud resilience is not only a question of regional redundancy, durable storage, or ordinary backup policy. When the failure begins inside the provider's administrative control…
Global Institutional
PayPal made credential-stuffing redress an account-abuse accountability test
PayPal, Inc. is a risk and accountability case because the accountability issue is that credential stuffing is attacker behavior, but the platform still controls detection thresholds, friction, notification, recovery proof, and the support path for affected users. The public…
Global Cloud Services
Telegram made abuse reporting a platform-responsibility accountability test
Telegram is a risk and accountability case because the accountability issue is that encrypted or privacy-oriented communications can also host public distribution and abuse surfaces, so responsibility has to distinguish private-message confidentiality from enforceable platform…
Global Cloud Services
Xero made accounting-platform outages an SME-continuity accountability test
XERO is a risk and accountability case because cloud accounting is no longer a back-office convenience for small businesses; it is where invoices, payroll evidence, bank reconciliation, tax filings, adviser work, receipts, approvals, and cash-flow records are kept live. The…
Global Cloud Services
Mailgun made API-key abuse a transactional-email accountability test
Mailgun Technologies Inc. is a risk and accountability case because transactional email platforms sit between customer automation and public email abuse. A compromised or over-permissioned sending credential can turn ordinary application infrastructure into a spam, phishing…
Global Cloud Services
Facebook made Cambridge Analytica a platform-data accountability test
FACEBOOK is a risk and accountability case because the Cambridge Analytica record showed how a social platform's developer permissions, friend-data access, app review, user notice, enforcement promises, and political-data controls could become civic infrastructure questions…
North America Institutional
Air Canada made chatbot refund advice an automation-liability accountability test
Air Canada is a risk and accountability case because a customer-service chatbot became the practical voice of the airline when a passenger relied on automated bereavement-fare refund advice, forcing a public test of whether companies can distance themselves from automated…
North America Institutional
FAA made NOTAM recovery a public-infrastructure accountability test
FAA is a risk and accountability case because the January 2023 NOTAM outage showed how a legacy safety-information system can become a national continuity risk when data integrity, backup separation, modernization funding, and fallback evidence are not independently visible. The…
North America Institutional
Chime made account closure and refund delay a consumer-funds accountability test
Chime is a risk and accountability case because app-based financial access can become a household liquidity problem when fraud controls, account closure decisions, refund timing, partner-bank escalation, and customer evidence intake are not visible enough for consumers whose…
North America Institutional
City of Dallas made ransomware recovery a civic-service accountability test
City of Dallas is a risk and accountability case because the May 2023 ransomware incident showed that municipal ransomware harm is measured by continuity of civic functions, not only by whether servers are eventually restored. The public record matters for residents, police…
Global Cloud Services
OpenAI made API and assistant status evidence an AI-workflow accountability test
OpenAI is a risk and accountability case because API and assistant-service availability now sits inside enterprise workflows, developer release paths, classrooms, support desks, public-service experiments, and regulated decision support. The public status record matters because…
Global Cloud Services
Stripe made payment API status and redress an SME-continuity accountability test
STRIPE is a risk and accountability case because the accountability issue is that payment infrastructure failures impose operational and financial costs downstream, so status evidence and repair proof have to be understandable to merchants as well as engineers. The public record…
Global Cloud Services
GitHub made Actions recovery a CI dependency-accountability test
GitHub Actions is a risk and accountability case because hosted CI/CD is no longer a background developer convenience. It is a release gate, a security automation surface, a dependency-update engine, a compliance signal, and an operational queue used by organizations that may…